fix Cors origin

app.py

@@ -80,22 +80,15 @@ os.makedirs(UPLOAD_FOLDER, exist_ok=True)
 
 app = FastAPI()
 
-origins = [
-    "https://project-diarzation-production.up.railway.app",
-    "http://127.0.0.1:8000",
-    "http://localhost:8000",
-    "https://huggingface.co/spaces/inwneon/project-voice-diarzation",
-    "http://127.0.0.1:3000",
-    "http://localhost:3000",
-    "http://127.0.0.1:5000",
-    "http://localhost:5000",
-    "*"
+origins = os.getenv("CORS_ORIGINS", "").split(",")
+origins = [o.strip() for o in origins if o.strip()] or [
+    "https://project-diarzation-production.up.railway.app"
 ]
 
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # หรือระบุให้ชัดเจน ไม่ผสมกัน
-    allow_credentials=False,  # ต้อง False ถ้าใช้ "*"
+    allow_origins=origins,
+    allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
 )