fix(api): allow origins from studio app

roedoejet · roedoejet · commit 3e9ef8aee8b2 · 2022-07-12T10:05:58.000-07:00
diff --git a/readalongs/web_api.py b/readalongs/web_api.py
@@ -40,15 +40,19 @@
 # Call get_langs() when the server loads to load the languages into memory
 LANGS = get_langs()
 
-if not os.getenv("PRODUCTION", False):
-    origins = ["http://localhost:4200"]  # Allow requests from Angular app
-    web_api_app.add_middleware(
-        CORSMiddleware,
-        allow_origins=origins,
-        allow_credentials=True,
-        allow_methods=["*"],
-        allow_headers=["*"],
-    )
+if os.getenv("PRODUCTION", True):
+    origins = [
+        "https://readalong-studio.mothertongues.org",
+    ]  # Allow requests from mt app
+else:
+    origins = ["*"]  # Allow requests from any origin
+web_api_app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,
+    allow_credentials=True,
+    allow_methods=["GET", "POST"],
+    allow_headers=["*"],
+)
 
 
 class RequestBase(BaseModel):
