Release v0.1.8

src/govoplan_core/server/fastapi.py

@@ -43,9 +43,11 @@ def create_govoplan_app(
 
     origins = [item.strip() for item in cors_origins if item.strip()]
     if origins:
+        if "*" in origins:
+            raise ValueError("CORS wildcard origin '*' cannot be used with credentialed requests; configure explicit origins.")
         app.add_middleware(
             CORSMiddleware,
-            allow_origins=["*"] if "*" in origins else origins,
+            allow_origins=origins,
             allow_credentials=True,
             allow_methods=["*"],
             allow_headers=["*"],