Merge branch 'fix/cert-cors-config' into fix/getcloser-security-config

Author: soohyunme

cert/backend/.env.example

@@ -0,0 +1,5 @@
+# LOG_LEVEL=INFO
+# ENVIRONMENT=dev
+
+# CORS Origins (쉼표로 구분)
+CORS_ORIGINS=https://cert.pseudo-lab.com,https://dev-cert.pseudolab-devfactory.com,http://localhost:5173

cert/backend/src/main.py

@@ -40,11 +40,23 @@ def configure_logging() -> None:
 # Access log middleware
 app.middleware("http")(access_log_middleware)
 
-# CORS 미들웨어 설정
-origins = os.getenv("CORS_ORIGINS", "").split(",")
+# CORS configuration
+# Load allowed origins from CORS_ORIGINS environment variable (comma-separated)
+cors_origins_str = os.getenv("CORS_ORIGINS", "")
+if cors_origins_str:
+    origins = [origin.strip() for origin in cors_origins_str.split(",") if origin.strip()]
+else:
+    # Default origins for local development and known production/dev domains
+    origins = [
+        "http://localhost:3000",
+        "http://localhost:5173",
+        "https://cert.pseudo-lab.com",
+        "https://dev-cert.pseudolab-devfactory.com",
+    ]
+
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],
+    allow_origins=origins,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],