From 442fa09533a33f7b8b77655b5ed47b7685318cf4 Mon Sep 17 00:00:00 2001 From: Mark Date: Wed, 4 Feb 2026 12:19:20 +0800 Subject: [PATCH] [modify] cors settting support '*' --- api/app/main.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/api/app/main.py b/api/app/main.py index 7e16d2c0..38020d4c 100644 --- a/api/app/main.py +++ b/api/app/main.py @@ -77,10 +77,14 @@ default_origins = [ ] allowed_origins = list({o for o in (default_origins + settings.CORS_ORIGINS) if o}) +# 如果 CORS_ORIGINS 包含 "*"，则允许所有来源 +if "*" in settings.CORS_ORIGINS: + allowed_origins = ["*"] + app.add_middleware( CORSMiddleware, allow_origins=allowed_origins, - allow_credentials=True, + allow_credentials=True if "*" not in allowed_origins else False, # 允许所有来源时不能使用 credentials allow_methods=["*"], allow_headers=["*"], )