How do I debug the Python web server? / OPTIONS /api/v1/build fails with 405

[voltagex]

Basically OPTIONS /build seems to fail with 405 Method Not Allowed.
podman compose logs server only shows INFO: 10.89.0.3:35486 - "OPTIONS /api/v1/build?1774078135285 HTTP/1.1" 405 Method Not Allowed

For my own personal server I am happy to blanket allow CORS & OPTIONS but I need to be able to get in and debug.

[voltagex]

diff --git a/asu/main.py b/asu/main.py
index 8602bac..76a156c 100644
--- a/asu/main.py
+++ b/asu/main.py
@@ -5,6 +5,7 @@ from pathlib import Path
 from typing import Union

 from fastapi import FastAPI, HTTPException, Request
+from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import FileResponse, HTMLResponse, RedirectResponse
 from fastapi.staticfiles import StaticFiles
 from fastapi.templating import Jinja2Templates
diff --git a/asu/main.py b/asu/main.py
index 8602bac..76a156c 100644
--- a/asu/main.py
+++ b/asu/main.py
@@ -5,6 +5,7 @@ from pathlib import Path
 from typing import Union

 from fastapi import FastAPI, HTTPException, Request
+from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import FileResponse, HTMLResponse, RedirectResponse
 from fastapi.staticfiles import StaticFiles
 from fastapi.templating import Jinja2Templates
@@ -28,6 +29,15 @@ logging.basicConfig(encoding="utf-8", level=settings.log_level)
 base_path = Path(__file__).resolve().parent

 app = FastAPI()
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
 app.include_router(api.router, prefix="/api/v1")
 app.include_router(stats.router, prefix="/api/v1")

But I am unsure how I had it working before without this, and I don't know if @aparcar wants to use CORS as a security feature so asu would need some way of configuring CORS instead of a blanket allow

[efahl]

The ASU server is usually just set up to deliver http, and you put a real proxy in front of it to handle things such as https and CORS. I use caddy for my proxy, the ASU server just listens on 127.0.0.1:8000.

[voltagex]

Sure, but that means rewriting OPTIONS requests instead of letting the server handle it. I do have Caddy as a reverse proxy and still needed this patch.