Massive update

drb-c2-core/app/main.py

@@ -5,8 +5,9 @@ from fastapi.middleware.cors import CORSMiddleware
 from app.internal.logger import logger
 from app.internal.mqtt_handler import mqtt_handler
 from app.internal.node_sweeper import sweeper_loop
+from app.config import settings
 from app.internal.auth import require_firebase_token, require_service_or_firebase_token
-from app.routers import nodes, systems, calls, upload, tokens
+from app.routers import nodes, systems, calls, upload, tokens, incidents, alerts
 
 
 @asynccontextmanager
@@ -27,16 +28,19 @@ app = FastAPI(title="DRB C2 Core", lifespan=lifespan)
 
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],
+    allow_origins=settings.cors_origins,
     allow_methods=["*"],
     allow_headers=["*"],
+    allow_credentials=True,
 )
 
-app.include_router(nodes.router,   dependencies=[Depends(require_service_or_firebase_token)])
-app.include_router(systems.router, dependencies=[Depends(require_service_or_firebase_token)])
-app.include_router(calls.router,   dependencies=[Depends(require_service_or_firebase_token)])
-app.include_router(tokens.router,  dependencies=[Depends(require_service_or_firebase_token)])
-app.include_router(upload.router)  # auth is per-node, handled inline
+app.include_router(nodes.router,     dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(systems.router,   dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(calls.router,     dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(tokens.router,    dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(incidents.router, dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(alerts.router,    dependencies=[Depends(require_service_or_firebase_token)])
+app.include_router(upload.router)    # auth is per-node, handled inline
 
 
 @app.get("/health")