referer

app.py

@@ -23,6 +23,7 @@ logging.basicConfig(level=os.environ.get("LOGLEVEL", "INFO"))
 MAX_SEED = np.iinfo(np.int32).max
 USE_TORCH_COMPILE = os.environ.get("USE_TORCH_COMPILE", "0") == "1"
 SPACE_ID = os.environ.get("SPACE_ID", "")
+DEV = os.environ.get("DEV", "0") == "1"
 
 DB_PATH = Path("/data/cache") if SPACE_ID else Path("./cache")
 IMGS_PATH = DB_PATH / "imgs"
@@ -107,8 +108,7 @@ app.add_middleware(
 
 @app.middleware("http")
 async def validate_origin(request: Request, call_next):
-    logging.info(f"Request origin: {request.headers}")
-    if request.headers.get("origin") not in origins:
+    if request.headers.get("origin") not in origins and not DEV:
         raise HTTPException(status_code=403, detail="Forbidden")
     response = await call_next(request)
     return response