Enable cors

Author: BirjuVachhani

lib/backend/rest_backend_service.dart

@@ -10,6 +10,8 @@ import 'backend_service.dart';
 
 const String globeBackendUrl =
     'https://pluto-server-cn2xut2-birjuvachhani.globeapp.dev/';
+const String cloudRunUrl =
+    'https://pluto-510516922464.asia-south1.run.app';
 
 class RestBackendService extends BackendService {
   String baseUrl = '';
@@ -21,7 +23,7 @@ class RestBackendService extends BackendService {
       baseUrl = 'http://localhost:8000';
     } else {
       log('Initializing backend with production server');
-      baseUrl = globeBackendUrl;
+      baseUrl = cloudRunUrl;
     }
   }
 

server/bin/server.dart

@@ -53,11 +53,42 @@ void main(List<String> args) async {
   final ip = InternetAddress.anyIPv4;
 
   // Configure a pipeline that logs requests.
-  final handler =
-      Pipeline().addMiddleware(logRequests()).addHandler(_router.call);
+  final handler = Pipeline()
+      .addMiddleware(logRequests())
+      .addMiddleware(enableCors())
+      .addHandler(_router.call);
 
   // For running in containers, we respect the PORT environment variable.
   final port = int.parse(Platform.environment['PORT'] ?? '8000');
   final server = await serve(handler, ip, port);
   print('Server listening on port ${server.port}');
 }
+
+Middleware enableCors() {
+  return (Handler handler) {
+    return (Request request) async {
+      // Handle preflight request (OPTIONS)
+      if (request.method == 'OPTIONS') {
+        return Response.ok(
+          '',
+          headers: {
+            'Access-Control-Allow-Origin': '*',
+            'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+            'Access-Control-Allow-Headers':
+                'Origin, Content-Type, Authorization',
+          },
+        );
+      }
+
+      // Forward request and add CORS headers
+      final response = await handler(request);
+      return response.change(
+        headers: {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+          'Access-Control-Allow-Headers': 'Origin, Content-Type, Authorization',
+        },
+      );
+    };
+  };
+}