Add CORS support and update vote endpoint response headers

main.py

@@ -8,11 +8,11 @@ from pathlib import Path
 from dotenv import load_dotenv
 from fastapi import BackgroundTasks, FastAPI, Header
 from fastapi.middleware.cors import CORSMiddleware
+from fastapi.responses import JSONResponse
 from huggingface_hub import CommitScheduler, HfApi, whoami
 from huggingface_hub.utils._errors import HTTPError
 from pydantic import BaseModel, Field
 from starlette.responses import RedirectResponse
-from fastapi import FastAPI, HTTPException, status
 
 load_dotenv()
 
@@ -41,6 +41,7 @@ VOTES_FILE = "votes/votes.jsonl"
 # Configure CORS
 origins = [
     "https://huggingface.co",
+    "chrome-extension://your-plugin-id",  # Replace with your Chrome plugin ID
 ]
 
 
@@ -70,30 +71,15 @@ def root():
 class Vote(BaseModel):
     dataset: str
     description: str
-    vote: int = Field(..., ge=0, le=1)
+    vote: int = Field(..., ge=-1, le=1)
     userID: str
 
 
-def validate_token(token: str):
-    try:
-        whoami(token=token)
-        return True
-    except HTTPError as e:
-        # check for HTTPError: Invalid user token. If you didn't pass a user token, make sure you are properly logged in by executing `huggingface-cli login`, and if you did pass a user token, double-check it's correct. in the error message
-        if "Invalid user token" in str(e):
-            return False
-
-
 @app.post("/vote")
 async def receive_vote(
-    vote: Vote, background_tasks: BackgroundTasks, authorization: str = Header(...)
+    vote: Vote,
+    background_tasks: BackgroundTasks,
 ):
-    token = authorization.split(" ")[1]
-    if not validate_token(token):
-        raise HTTPException(
-            status_code=status.HTTP_401_UNAUTHORIZED,
-            detail="Invalid user token.",
-        )
     vote_entry = {
         "dataset": vote.dataset,
         "vote": vote.vote,
@@ -102,4 +88,11 @@ async def receive_vote(
     }
     # Append the vote entry to the JSONL file
     background_tasks.add_task(save_vote, vote_entry)
-    return {"message": "Vote submitted successfully"}
+
+    response = JSONResponse(content={"message": "Vote submitted successfully"})
+    response.headers[
+        "Access-Control-Allow-Origin"
+    ] = "chrome-extension://your-plugin-id"  # Replace with your Chrome plugin ID
+    response.headers["Access-Control-Allow-Methods"] = "POST"
+    response.headers["Access-Control-Allow-Headers"] = "*"
+    return response