From 0127c16d0bd0a7acbeccb4251aff4883f0a8de99 Mon Sep 17 00:00:00 2001 From: Barcode Betty Date: Sat, 23 May 2026 20:45:56 +0000 Subject: [PATCH] fix: add UAT/dev domains to cors_origins Add dev.cartsnitch.com and uat.cartsnitch.com to the CORS origins list to match the infra HTTPRoute domains and fix auth blocking on UAT. Refs: CAR-992 Co-Authored-By: Paperclip --- src/cartsnitch_api/config.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/cartsnitch_api/config.py b/src/cartsnitch_api/config.py index c835bca..c71d753 100644 --- a/src/cartsnitch_api/config.py +++ b/src/cartsnitch_api/config.py @@ -23,7 +23,12 @@ class Settings(BaseSettings): auth_service_url: str = "http://auth:3001" - cors_origins: list[str] = ["http://localhost:3000", "https://cartsnitch.com"] + cors_origins: list[str] = [ + "http://localhost:3000", + "https://cartsnitch.com", + "https://dev.cartsnitch.com", + "https://uat.cartsnitch.com", + ] receiptwitness_url: str = "http://receiptwitness:8001" stickershock_url: str = "http://stickershock:8002" -- 2.52.0