Allow credentialed Gradio CORS from custom domain

#40
OpenHands org

Wrap the mounted Gradio app with explicit CORS support for https://index.openhands.dev. The custom domain loads the Gradio frontend from Vercel but uses the hf.space runtime as window.gradio_config.root, so queue and heartbeat preflights need Access-Control-Allow-Credentials.

This fixes the browser-side CORS failure that still surfaced as Connection errored out after the JSON body normalization fix.

Follow-up to OpenHands/openhands-index-results#1227.

juan-all-hands changed pull request status to merged

Sign up or log in to comment