fix CORS

app.py

@@ -5,7 +5,9 @@ from flask_cors import CORS, cross_origin
 import __main__
 
 app = Flask(__name__)
-cors = CORS(app, supports_credentials=True, resources={r"/summarize/*": {"origins": "http://0.0.0.0/summarize"}})
+CORS(app, resources={r"/*": {"origins": "http://0.0.0.0:7860"}}, supports_credentials=True)
+app.config['CORS_ALLOW_HEADERS'] = 'Content-Type'
+app.config['CORS_SUPPORTS_CREDENTIALS'] = 'True'
 # shortTokenizer = BartTokenizer.from_pretrained('sshleifer/distilbart-xsum-12-6')
 # shortModel = BartForConditionalGeneration.from_pretrained('sshleifer/distilbart-xsum-12-6')
 
@@ -30,24 +32,25 @@ def recommend():
             short_output_summary, long_output_summary = summarize(input_text)
             response = jsonify({'short': short_output_summary.strip(), 'long': long_output_summary.strip()})
             # Pass output summary to the output template
-            response.headers['Access-Control-Allow-Methods'] = '*'
-            response.headers['Access-Control-Allow-Domain'] = '*'
-            response.headers['Access-Control-Allow-Credentials'] = True
+            response.headers.add('Access-Control-Allow-Origin', 'http://0.0.0.0:7860')
+            response.headers.add('Access-Control-Allow-Headers', 'Content-Type, Authorization')
+            response.headers.add('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS')
+            response.headers.add('Access-Control-Allow-Credentials', 'true')
             return response
 
         except Exception as e:
             return render_template('index.html', query=e)
 
     elif request.method == "OPTIONS":
-        resp = make_response("OK")
-        resp.status_code = 201
-        # resp.headers['Access-Control-Allow-Origin'] = 'http://0.0.0.0'
-        resp.headers['Access-Control-Allow-Methods'] = '*'
-        resp.headers['Access-Control-Allow-Domain'] = '*'
-        resp.headers['Access-Control-Allow-Credentials'] = True
+        response = make_response("OK")
+        response.status_code = 201
+        response.headers.add('Access-Control-Allow-Origin', 'http://0.0.0.0:7860')
+        response.headers.add('Access-Control-Allow-Headers', 'Content-Type, Authorization')
+        response.headers.add('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE,OPTIONS')
+        response.headers.add('Access-Control-Allow-Credentials', 'true')
         # Debug
         print("Right")
-        return resp
+        return response
 
     pass