From cb6357f57706ed895bc259c47907a765bb93b6a2 Mon Sep 17 00:00:00 2001 From: "DESKTOP-RTLN3BA\\$punk" Date: Mon, 4 May 2026 19:55:19 -0700 Subject: [PATCH] feat: add CORS preflight response caching for 24 hours --- surfsense_backend/app/app.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/surfsense_backend/app/app.py b/surfsense_backend/app/app.py index 08194e7fb..5057e7d00 100644 --- a/surfsense_backend/app/app.py +++ b/surfsense_backend/app/app.py @@ -754,6 +754,12 @@ app.add_middleware( allow_credentials=True, allow_methods=["*"], # Allows all methods allow_headers=["*"], # Allows all headers + # Cache CORS preflight (OPTIONS) responses for 24h. Browsers clamp: + # Chrome/Edge cap at 7200s, Firefox honours up to 86400s. Setting the + # higher value lets each browser cache for as long as it allows. This + # eliminates an OPTIONS round-trip on every non-simple request from + # FRONTEND_URL to BACKEND_URL. + max_age=86400, ) # Password / email-based auth routers are only mounted when not running in