feat(api): production security, cors hardening, latency optimizations, postman artifacts & frontend documentation

2026-08-31 13:48:54 +05:30
parent 4e21d617ce
commit e91cdbae6e
48 changed files with 3742 additions and 65 deletions
@@ -24,3 +24,21 @@ SARVAM_API_KEY = os.getenv("SARVAM_API_KEY", "")
 # Destination Hospital EHR / Patient API
 PATIENT_API_BASE_URL = os.getenv("PATIENT_API_BASE_URL", "")
 PATIENT_API_TOKEN = os.getenv("PATIENT_API_TOKEN", "")
+
+# CORS Allowed Origins Configuration
+DEFAULT_CORS_ORIGINS = [
+    "http://localhost:3000",
+    "http://localhost:5173",
+    "http://127.0.0.1:3000",
+    "http://127.0.0.1:5173",
+    "http://localhost:8000",
+    "http://127.0.0.1:8000",
+    "https://onboarding.skyheal.ai",
+]
+
+cors_raw = os.getenv("CORS_ORIGINS", "")
+if cors_raw:
+    CORS_ORIGINS = [origin.strip() for origin in cors_raw.split(",") if origin.strip()]
+else:
+    CORS_ORIGINS = DEFAULT_CORS_ORIGINS
+