From dcc8e10bd20f03fc13dc3c6816bd0e7c05108e3b Mon Sep 17 00:00:00 2001
From: steinhelge <steinhelge@users.noreply.github.com>
Date: Wed, 26 Nov 2025 11:48:38 +0100
Subject: [PATCH] config: Expand CORS policy to include development and
 production frontend URLs.

---
 src/Hospitality.Backend/Program.cs | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/src/Hospitality.Backend/Program.cs b/src/Hospitality.Backend/Program.cs
index 0fd125b..6b45e09 100644
--- a/src/Hospitality.Backend/Program.cs
+++ b/src/Hospitality.Backend/Program.cs
@@ -67,9 +67,13 @@ builder.Services.AddCors(options =>
 {
     options.AddPolicy("AllowFrontend", policy =>
     {
-        policy.WithOrigins("http://localhost:5173")
-              .AllowAnyHeader()
-              .AllowAnyMethod();
+        policy.WithOrigins(
+            "http://localhost:5173",
+            "https://hospitality-dev.theriise.net",
+            "https://hospitality.theriise.net"
+        )
+        .AllowAnyHeader()
+        .AllowAnyMethod();
     });
 });