fix: thread-safe signature loading, clear missing-file error, restrict CORS methods

2026-03-27 18:01:43 +01:00
parent 0f643477f6
commit 09b5317a0c
2 changed files with 15 additions and 5 deletions
@@ -30,8 +30,8 @@ app.add_middleware(
    CORSMiddleware,
    allow_origins=settings.cors_origins,
    allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
+    allow_methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
+    allow_headers=["Authorization", "Content-Type"],
 )

 app.include_router(auth.router, prefix="/api/v1/auth", tags=["auth"])