Sansan d31bf3551c Allow CORS origins from CORS_ALLOWED_ORIGINS ...

Echo compares allowed origins literally, so "https://*" and "http://*" never
matched a real origin and no CORS headers were sent. The allowed origins now
come from CORS_ALLOWED_ORIGINS (comma-separated, checked at startup). When it
is empty, only same-origin requests work, which is enough for the bundled
frontend.

Credentials are no longer allowed since the API uses Bearer tokens. Browsers
may now send Range and X-Queue-Id and read X-Queue-Id and Content-Range.

2026-10-07 20:03:13 +02:00

.gitea/workflows

Merge workflows into one CI pipeline

2026-10-06 15:35:32 +02:00

cmd

Load every soundtrack when the search page opens

2026-10-07 16:46:31 +02:00

internal

Allow CORS origins from CORS_ALLOWED_ORIGINS

2026-10-07 20:03:13 +02:00

songs

Fixed some bugs and added Random Classic

2024-07-28 15:58:12 +02:00

testCharacters

Make pool and poolSong global variables

2026-05-26 20:54:12 +02:00

testMusic

Rewrite tests to run without a database

2026-10-06 15:20:31 +02:00

.air.toml

Generate the OpenAPI spec with Huma instead of swag

2026-10-06 16:31:06 +02:00

.dockerignore

Clean up build tooling and Dockerfile

2026-10-06 15:21:46 +02:00

.gitignore

Add a command to write the OpenAPI spec without a server

2026-10-06 17:01:12 +02:00

Dockerfile

Serve the frontend's config.js with the API password

2026-10-06 19:01:17 +02:00

go.mod

Generate the OpenAPI spec with Huma instead of swag

2026-10-06 16:31:06 +02:00

go.sum

Generate the OpenAPI spec with Huma instead of swag

2026-10-06 16:31:06 +02:00

justfile

Add a command to write the OpenAPI spec without a server

2026-10-06 17:01:12 +02:00

sqlc.yaml

Restructure backend into services and fix security, crash and sync issues

2026-10-06 15:20:14 +02:00

S

Description

No description provided

3.9 GiB

0 Stars 1 Watchers 0 Forks

Languages

JavaScript 86%

Go 10.1%

Vue 2.8%

Python 0.3%

Just 0.3%

Other 0.3%