From dc16cdda95dbad163b6e6fffb597a6cce9557e2e Mon Sep 17 00:00:00 2001
From: Akbar Rahman <hi@alv.cx>
Date: Fri, 23 Jan 2026 00:36:45 +0000
Subject: [PATCH] add cors headers to allow any origin

---
 src/main.rs | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/main.rs b/src/main.rs
index 42ba52f..5c2ed95 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -1,6 +1,6 @@
 use std::{env, error::Error};
 
-use poem::{Route, Server, listener::TcpListener};
+use poem::{EndpointExt, Route, Server, listener::TcpListener};
 use poem_openapi::{
     ApiResponse, Object, OpenApi, OpenApiService, SecurityScheme,
     auth::{Basic, Bearer},
@@ -201,7 +201,8 @@ async fn main() -> Result<(), Box<dyn Error>> {
     let ui = api_service.swagger_ui();
     let app = Route::new()
         .nest("/api/v1/", api_service)
-        .nest("/ui/v1/", ui);
+        .nest("/ui/v1/", ui)
+        .with(poem::middleware::Cors::new());
 
     Server::new(TcpListener::bind("0.0.0.0:3000"))
         .run(app)