[Fix] CORS allow_methods에 PATCH/DELETE 추가

[zweadfx]

어떤 변경사항인가요?

CORS 미들웨어의 allow_methods에 PATCH와 DELETE가 누락되어 Plans API의 완료 토글 및 삭제 요청이 브라우저에서 차단되던 버그를 수정합니다.

작업 상세 내용

• src/main.py CORS allow_methods에 PATCH, DELETE 추가

체크리스트

• self-test를 수행하였는가?
• 관련 문서나 주석을 업데이트하였는가?
• 설정한 코딩 컨벤션을 준수하였는가?

관련 이슈

• 관련 이슈: [Fix] CORS allow_methods에 PATCH/DELETE 누락으로 Plans API 일부 동작 불가 #91

리뷰 포인트

• allow_methods=["*"] 대신 명시적으로 필요한 메서드만 나열하는 방식을 유지했습니다.
• 현재 API에서 PUT 메서드는 사용하지 않으므로 포함하지 않았습니다.

참고사항 및 스크린샷(선택)

변경 전:

allow_methods=["GET", "POST", "OPTIONS"],

변경 후:

allow_methods=["GET", "POST", "PATCH", "DELETE", "OPTIONS"],

Summary by CodeRabbit

• Bug Fixes
  • Extended API compatibility by enabling additional HTTP methods (PATCH and DELETE) for cross-origin requests alongside existing GET, POST, and OPTIONS methods.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c452f378-024c-4129-85b0-1bf031ddef82

📥 Commits

Reviewing files that changed from the base of the PR and between bea59e8 and d95b689.

📒 Files selected for processing (1)

• src/main.py

---

📝 Walkthrough

Walkthrough

Updated CORS middleware configuration in src/main.py to include PATCH and DELETE HTTP methods in the allow_methods parameter, expanding the set of permitted cross-origin requests from the previous GET, POST, and OPTIONS only.

Changes

Cohort / File(s)	Summary
CORS Configuration src/main.py	Extended CORS middleware allow_methods to include PATCH and DELETE HTTP verbs alongside existing GET, POST, and OPTIONS.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related issues

• [Fix] CORS allow_methods에 PATCH/DELETE 누락으로 Plans API 일부 동작 불가 #91: This PR directly resolves the CORS preflight blocking issue that prevented PATCH and DELETE requests on the Plans API by adding those methods to the allow list.

Possibly related PRs

• [Fix] gear 엔드포인트 타임아웃 추가 및 CORS 허용 메서드 제한 #59: Both PRs modify the CORS allow_methods configuration in src/main.py to adjust which HTTP methods are permitted for cross-origin requests.

Poem

🐰 A rabbit hops through CORS gates,
With PATCH and DELETE now in place,
No more preflight delays and waits,
The API breathes with wider grace! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: adding PATCH and DELETE HTTP methods to the CORS allow_methods configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/cors-plans-401

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}