fix CORS

app/main.py

@@ -1,9 +1,19 @@
 from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
 from app.api import candles, orders, account, positions
 from app.api.user import user
 
 app = FastAPI()
 
+# CORS config: allow all origins (for development)
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
 app.include_router(candles.router, prefix="/api")
 app.include_router(orders.router, prefix="/api")
 app.include_router(account.router, prefix="/api")