velxio/backend/app
David Montero Crespo fddfcfd2a6 fix(cors): allow Tauri desktop origins so v0.4.0 agent fetches don't fail
User report after the v0.4.0 desktop agent landed:
> agente devuelve "LLM call failed: Failed to fetch"

"Failed to fetch" is a network-layer error, not 401. Root cause: the
OSS CORS allow_origins list only included http://localhost:517[3-5]
(vite dev) and settings.FRONTEND_URL. The desktop bundle runs from
either tauri://localhost (macOS/Linux) or http://tauri.localhost
(Windows) - both cross-origin to velxio.dev - so the browser
blocked the agent's POST /api/pro/agent/llm preflight before the
backend ever saw it.

Added all three Tauri scheme variants to the allow list. After this
lands + a backend restart the desktop agent's fetch reaches the
real /api/pro/agent/llm and the dual-auth dep from v0.4.0 Phase 1
gets to do its job (Bearer license-key → resolved User → quota
check → upstream LLM proxy).

Origins added:
  tauri://localhost          # macOS / Linux (Tauri 2.x default)
  http://tauri.localhost     # Windows (Tauri 2.x default)
  https://tauri.localhost    # older Tauri 2.x releases

allow_credentials stays True - the existing cookies-from-web flow
still works, the Tauri origins just don't have any cookies to send.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-26 22:35:51 -03:00
..
api feat(chips): C-to-Z80 compile via SDCC + LED chaser example 2026-05-19 00:31:10 -03:00
core Refactor code structure for improved readability and maintainability 2026-05-18 21:50:45 -03:00
database refactor(oss-split): remove auth/DB/admin stack from OSS 2026-05-14 13:36:31 -03:00
mcp feat: integrate MCP (Model Context Protocol) for agent compatibility 2026-03-11 15:29:55 +00:00
models refactor(oss-split): remove auth/DB/admin stack from OSS 2026-05-14 13:36:31 -03:00
schemas refactor(oss-split): remove auth/DB/admin stack from OSS 2026-05-14 13:36:31 -03:00
services fix(esp32_worker): skip per-byte log+emit for I2CWriteSink display drivers 2026-05-23 22:26:19 +02:00
utils refactor(oss-split): remove auth/DB/admin stack from OSS 2026-05-14 13:36:31 -03:00
__init__.py feat: Implement Arduino Simulator with component management and simulation features 2026-03-03 00:20:49 -03:00
main.py fix(cors): allow Tauri desktop origins so v0.4.0 agent fetches don't fail 2026-05-26 22:35:51 -03:00