Add a CORS header to API calls

[grololo06]

We have the problem with EcoTaxoGuide that the front-end app (using Angular) refuses to connect to the API because it does not provide a correct CORS (https://developer.mozilla.org/fr/docs/Web/HTTP/CORS/Errors/CORSMissingAllowOrigin).

E.g.: https://ecotaxa.obs-vlfr.fr/api/object/25557188

Hacked today a "solution" in nginx, but the proper fix should be in the back-end: https://fastapi.tiangolo.com/tutorial/cors/

[grololo06]

        location /api/object/  {
                proxy_pass http://localhost:8000;
                add_header 'Access-Control-Allow-Origin' '*' always;
        }
        location /api/vault/  {
                proxy_pass http://localhost:8000;
                add_header 'Access-Control-Allow-Origin' '*' always;
        }

[sonnyp]

Hey Sonny from FairScope here

We started using the Ecotaxa API on the PlanktoScope

I noticed the CORS issue as well. I've setup a simple reverse proxy with CORS enabled but it would be great if ecotaxa.obs-vlfr.fr/api and cotaxa.obs-vlfr.fr/vault allowed arbitrary origins.

Let me know if I can help.