refactor: add cors setting via environent value

backend/Makefile

@@ -43,16 +43,20 @@ export ENV=local
 export DB_HOST=localhost
 export DB_NAME=main
 export DB_CONNECTOR=mysql+pymysql
-
+export ALLOW_ORIGINS=http://127.0.0.1:8000# pass the allowed origins -> http://localhost:3000,http://localhost:3001
+export ALLOW_CREDENTIALS=true
+export ALLOW_METHODS=*# pass the allowed methods -> GET,POST,PUT,DELETE
+export ALLOW_HEADERS=*# pass the allowed headers -> Content-Type,Authorization
+export LOG_LEVEL=DEBUG
 run-user: ## Start the User API
 	@export POWERTOOLS_METRICS_NAMESPACE=user-api && \
 	export POWERTOOLS_SERVICE_NAME=user-api && \
-	poetry run uvicorn oqtopus_cloud.user.lambda_function:app --host 0.0.0.0 --port 8080 --reload
+	poetry run uvicorn oqtopus_cloud.user.lambda_function:app --host 0.0.0.0 --port 8080 --reload --log-level debug
 
 run-provider: ## Start the Provider API
 	@export POWERTOOLS_METRICS_NAMESPACE=provider-api && \
 	export POWERTOOLS_SERVICE_NAME=provider-api && \
-	poetry run uvicorn oqtopus_cloud.provider.lambda_function:app --host 0.0.0.0 --port 8888 --reload
+	poetry run uvicorn oqtopus_cloud.provider.lambda_function:app --host 0.0.0.0 --port 8888 --reload --log-level debug
 
 up: ## Start the DB
 	@docker compose up

backend/oqtopus_cloud/provider/conf.py

@@ -1,7 +1,10 @@
+import os
+
 from aws_lambda_powertools import Logger, Metrics, Tracer
 
 logger: Logger = Logger()
 tracer: Tracer = Tracer()
 metrics: Metrics = Metrics()
 
-logger.setLevel("INFO")
+LOG_LEVEL = os.getenv("LOG_LEVEL", "INFO")
+logger.setLevel(LOG_LEVEL)

backend/oqtopus_cloud/provider/lambda_function.py

@@ -3,6 +3,9 @@
 This module is the entry point of the development application. It creates the FastAPI
 """
 
+import os
+
+import setuptools._distutils.util
 from fastapi import FastAPI
 from mangum import (
     Mangum,
@@ -26,12 +29,20 @@
 app: FastAPI = FastAPI()
 
 app.add_middleware(CustomMiddleware)
+
+ALLOW_ORIGINS = os.getenv("ALLOW_ORIGINS", "").split(",")
+ALLOW_CREDENTIALS = setuptools._distutils.util.strtobool(
+    os.getenv("ALLOW_CREDENTIALS", "false")
+)
+ALLOW_METHODS = os.getenv("ALLOW_METHODS", "").split(",")
+ALLOW_HEADERS = os.getenv("ALLOW_HEADERS", "").split(",")
+
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],
+    allow_origins=ALLOW_ORIGINS,
     allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
+    allow_methods=ALLOW_METHODS,
+    allow_headers=ALLOW_HEADERS,
 )
 
 app.include_router(

backend/oqtopus_cloud/user/conf.py

@@ -1,7 +1,10 @@
+import os
+
 from aws_lambda_powertools import Logger, Metrics, Tracer
 
 logger: Logger = Logger()
 tracer: Tracer = Tracer()
 metrics: Metrics = Metrics()
 
-logger.setLevel("INFO")
+LOG_LEVEL = os.getenv("LOG_LEVEL", "INFO")
+logger.setLevel(LOG_LEVEL)

backend/oqtopus_cloud/user/lambda_function.py

@@ -3,6 +3,9 @@
 This module is the entry point of the development application. It creates the FastAPI
 """
 
+import os
+
+import setuptools._distutils.util
 from fastapi import FastAPI
 from mangum import (
     Mangum,
@@ -24,12 +27,20 @@
 app: FastAPI = FastAPI()
 
 app.add_middleware(CustomMiddleware)
+
+ALLOW_ORIGINS = os.getenv("ALLOW_ORIGINS", "").split(",")
+ALLOW_CREDENTIALS = setuptools._distutils.util.strtobool(
+    os.getenv("ALLOW_CREDENTIALS", "false")
+)
+ALLOW_METHODS = os.getenv("ALLOW_METHODS", "").split(",")
+ALLOW_HEADERS = os.getenv("ALLOW_HEADERS", "").split(",")
+
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],
+    allow_origins=ALLOW_ORIGINS,
     allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
+    allow_methods=ALLOW_METHODS,
+    allow_headers=ALLOW_HEADERS,
 )
 
 app.include_router(

pyproject.toml

@@ -20,6 +20,8 @@ cryptography = "^42.0.5"
 pydantic = "^2.6.4"
 fastapi = "^0.110.0"
 aws-xray-sdk = "^2.13.0"
+setuptools = "^75.1.0"
+types-setuptools = "^75.1.0.20240917"
 
 
 [tool.poetry.group.dev.dependencies]

terraform/service/modules/api-server/main.tf

@@ -31,14 +31,19 @@ data "aws_caller_identity" "current" {}
 resource "aws_lambda_function" "this" {
   architectures = ["x86_64"]
 
-  environment {
+  environment { # TODO :Add module input variables
     variables = {
       DB_HOST                      = var.db_proxy_endpoint
       DB_NAME                      = "main"
       DB_CONNECTOR                 = "mysql+pymysql"
       SECRET_NAME                  = var.db_secret_arn
       POWERTOOLS_METRICS_NAMESPACE = "SampleAppc"
       POWERTOOLS_SERVICE_NAME      = "SampleAppc"
+      ALLOW_ORIGINS                = "*"
+      ALLOW_CREDENTIALS            = true
+      ALLOW_METHODS                = "*"
+      ALLOW_HEADERS                = "*"
+      LOG_LEVEL                    = "DEBUG"
     }
   }