From 6e46d3af391af3665f862fa4590e608052c9e9d2 Mon Sep 17 00:00:00 2001 From: Sagar Gupta Date: Sat, 14 Mar 2026 16:17:33 +0530 Subject: [PATCH] fix: set CORS to wildcard for public API access --- backend/src/ledger_sync/api/main.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/backend/src/ledger_sync/api/main.py b/backend/src/ledger_sync/api/main.py index 42ebe46..52d739e 100644 --- a/backend/src/ledger_sync/api/main.py +++ b/backend/src/ledger_sync/api/main.py @@ -225,10 +225,10 @@ async def add_timing_header( app.add_middleware( CORSMiddleware, - allow_origins=_cors_origins, - allow_credentials=True, - allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"], - allow_headers=["Authorization", "Content-Type"], + allow_origins=["*"], + allow_credentials=False, + allow_methods=["*"], + allow_headers=["*"], )