From 9df2ee08d2183463a8cf192fe37ea315d22d2c26 Mon Sep 17 00:00:00 2001
From: Frank Agerholm <frank@agerholm.de>
Date: Sun, 25 Jan 2026 17:00:35 +0100
Subject: [PATCH] backend: CORS Support

---
 backend/app/main.py | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/backend/app/main.py b/backend/app/main.py
index 4159e8d..a66e4ea 100644
--- a/backend/app/main.py
+++ b/backend/app/main.py
@@ -10,12 +10,24 @@ from .auth import (
     create_access_token, get_password_hash,
 )
 from fastapi.security import OAuth2PasswordRequestForm
+from fastapi.middleware.cors import CORSMiddleware
 
 app = FastAPI(title="Server Worklog")
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],  # oder deine echte Domain
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
 
 # Nur für lokale Entwicklung, in Produktion via Alembic
 Base.metadata.create_all(bind=engine)
 
+@app.options("/{path:path}")
+def preflight_handler(path: str):
+    return {}
+
 @app.post("/auth/register", response_model=schemas.UserRead)
 def register_user(user_in: schemas.UserCreate, db: Session = Depends(get_db)):
     existing = db.query(models.User).filter(models.User.username == user_in.username).first()