From d61592c23967205c24c0f538ab170bd34a7bfa08 Mon Sep 17 00:00:00 2001
From: LD-Reborn <lucretia.dietz@gmx.de>
Date: Fri, 17 Jul 2026 21:37:21 +0200
Subject: [PATCH] feat(server): adds cors headers

---
 src/ReverseLlama.Server/Program.cs | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/ReverseLlama.Server/Program.cs b/src/ReverseLlama.Server/Program.cs
index 85a0d90..4df3525 100644
--- a/src/ReverseLlama.Server/Program.cs
+++ b/src/ReverseLlama.Server/Program.cs
@@ -86,6 +86,21 @@ if (settings.Keycloak.IsConfigured)
 
 app.UseElmah();
 
+app.Use(async (context, next) =>
+{
+    context.Response.Headers.AccessControlAllowOrigin = "*";
+    context.Response.Headers.AccessControlAllowMethods = "GET, POST, PUT, DELETE, PATCH, OPTIONS";
+    context.Response.Headers.AccessControlAllowHeaders = "Content-Type, Authorization";
+
+    if (HttpMethods.IsOptions(context.Request.Method))
+    {
+        context.Response.StatusCode = StatusCodes.Status204NoContent;
+        return;
+    }
+
+    await next();
+});
+
 app.UseWebSockets(new WebSocketOptions
 {
     KeepAliveInterval = TimeSpan.FromSeconds(30)