Configure CORS and security middlewares

derivation.nix

@@ -3,7 +3,18 @@ with python313Packages;
 buildPythonApplication {
   pname = "cereal";
   version = "0.0.1";
-  propagatedBuildInputs = [ flask requests waitress sqlalchemy argon2-cffi pyjwt cryptography jinja2];
+  propagatedBuildInputs = [
+    flask
+    requests
+    waitress
+    sqlalchemy
+    argon2-cffi
+    pyjwt
+    cryptography
+    jinja2
+    flask-talisman
+    flask-cors
+  ];
   src = ./.;
   pyproject = true;
   build-system = [setuptools];

shell.nix

@@ -9,6 +9,8 @@ let
     pyjwt
     cryptography
     jinja2
+    flask-talisman
+    flask-cors
   ]);
 in
 with pkgs;

src/main.py

@@ -9,6 +9,9 @@ from dataclasses import dataclass
 from src.infra import get_database, UserRepoImpl
 from waitress import serve
 from flask import Flask
+from flask_cors import CORS
+from flask_talisman import Talisman
+
 import argparse
 import logging
 
@@ -33,6 +36,8 @@ class MyFlask(Flask):
 def create_app(name: str, config: Config) -> Flask:
     logging.basicConfig(level=config.logging.level, format=('%(asctime)s %(levelname)s [%(name)s] %(message)s'))
     app = MyFlask(name)
+    CORS(app)
+    Talisman(app)
 
     # Configure Services
     database = get_database(config.database)