Allow connections from localhost, regardless of CORS

app/main.py

@@ -3,6 +3,7 @@
 
 import asyncpg
 from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 
 from app.common import db
 from app.config import app_configs, settings
@@ -38,6 +39,16 @@ async def lifespan(_app: FastAPI) -> AsyncIterator[State]:
 
 app = FastAPI(lifespan=lifespan, **app_configs)
 
+origins = [
+    "http://localhost:5173",
+]
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
 
 @app.get("/healthcheck", include_in_schema=False)
 async def healthcheck() -> dict[str, str]: