Merge pull request #198 from ecmwf-projects/COPDS-1878-allow-origins

Allow CORS by default

cads_processing_api_service/config.py

@@ -37,6 +37,8 @@ class Settings(pydantic_settings.BaseSettings):
     profiles_service: str = "profiles-api"
     profiles_api_service_port: int = 8000
 
+    allow_cors: bool = True
+
     default_cache_control: str = "max-age=2"
     default_vary: str = "PRIVATE-TOKEN, Authorization"
     public_cache_control: str = "public, max-age=60"

cads_processing_api_service/main.py

@@ -15,7 +15,6 @@
 # limitations under the License
 
 import logging
-import os
 import uuid
 from contextlib import asynccontextmanager
 from typing import Any, AsyncGenerator, Awaitable, Callable, Mapping, MutableMapping
@@ -27,7 +26,15 @@
 import starlette_exporter
 import structlog
 
-from . import clients, constraints, costing, exceptions, middlewares, translators
+from . import (
+    clients,
+    config,
+    constraints,
+    costing,
+    exceptions,
+    middlewares,
+    translators,
+)
 
 
 def add_user_request_flag(
@@ -86,7 +93,7 @@ async def initialize_logger(
     return response
 
 
-if os.environ.get("DEBUG", "0") == "1":
+if config.ensure_settings().allow_cors:
     app.add_middleware(
         fastapi.middleware.cors.CORSMiddleware,
         allow_origins=["*"],