The API currently rejects cross-origin requests. The frontend at quotes.cmon1975.com cannot call the API from a browser until CORS headers are configured.
Add tower-http CORS layer to the router in routes.rs, restricting allowed origins to https://quotes.cmon1975.com in production and http://localhost:* in development. Origin should be configurable via .env.
The API currently rejects cross-origin requests. The frontend at
quotes.cmon1975.comcannot call the API from a browser until CORS headers are configured.Add
tower-httpCORS layer to the router inroutes.rs, restricting allowed origins to https://quotes.cmon1975.com in production and http://localhost:* in development. Origin should be configurable via.env.