From a2b78fc8566ae62f576feb33cbeeca20aaece497 Mon Sep 17 00:00:00 2001
From: EugeneTes <meelstorm@gmail.com>
Date: Sat, 15 Aug 2026 11:35:34 +0000
Subject: [PATCH] Enable CORS for the Vite dev origin

---
 backend/Program.cs | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/backend/Program.cs b/backend/Program.cs
index f2974c1..d1e56ec 100644
--- a/backend/Program.cs
+++ b/backend/Program.cs
@@ -8,7 +8,14 @@ var builder = WebApplication.CreateBuilder(args);
 builder.Services.AddDbContext<AppDbContext>(options =>
     options.UseNpgsql(builder.Configuration.GetConnectionString("Postgres")));
 
-// MARKER: CORS SERVICES
+const string DevCorsPolicy = "DevCors";
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy(DevCorsPolicy, policy => policy
+        .WithOrigins("http://localhost:5173")
+        .AllowAnyHeader()
+        .WithMethods("GET", "POST", "PATCH", "DELETE"));
+});
 
 builder.Services
     .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
@@ -37,7 +44,10 @@ builder.Services.AddControllers();
 
 var app = builder.Build();
 
-// MARKER: CORS MIDDLEWARE
+if (app.Environment.IsDevelopment())
+{
+    app.UseCors(DevCorsPolicy);
+}
 
 app.UseAuthentication();
 app.UseAuthorization();