fix: handle pre-flight requests

go/cmd/orion/main.go

@@ -119,9 +119,13 @@ func main() {
 	mux.Handle("POST /depot/upload", withAuth(h.PrepareUpload))
 	mux.Handle("POST /depot/objects/{id}/confirm", withAuth(h.ConfirmUpload))
 
+	// Apply middleware
+  // nil allows all origins (required for electron app)
+	muxWithCors := middleware.CORS(nil)(mux)
+
 	addr := fmt.Sprintf("0.0.0.0:%s", port)
 	slog.Info("running server", "addr", addr)
-	if err := http.ListenAndServe(addr, mux); err != nil {
+	if err := http.ListenAndServe(addr, muxWithCors); err != nil {
 		slog.Error("server failed", "error", err)
 		os.Exit(1)
 	}