copilot-swe-agent[bot] 9f99b6c6d7 fix: handle empty BACKEND_CORS_ORIGINS env var to prevent JSONDecodeError ...

In pydantic_settings v2, List[str] fields are JSON-parsed by the env
source before pydantic validators run. When BACKEND_CORS_ORIGINS=""
(empty string) in Kubernetes, json.loads("") raised JSONDecodeError,
crashing alembic migrations.

Fixes:
- Add env_ignore_empty=True to class Config so pydantic_settings skips
  empty-string env vars and falls back to the field default
- Update assemble_cors_origins validator to explicitly handle empty and
  whitespace-only strings (returns []), JSON array strings (parsed via
  json.loads), and filters empty tokens from comma-separated values
- Add backend/app/tests/test_config.py covering all CORS origins
  parsing scenarios including the empty-string regression case

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/53bb1064-2a32-4691-8397-9d4663bc18a8

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-29 12:08:59 +00:00

..

__init__.py

🔒 security: move IMAP credentials to request body and fix CI/pylint issues

2026-03-23 18:57:40 +00:00

config.py

fix: handle empty BACKEND_CORS_ORIGINS env var to prevent JSONDecodeError

2026-03-29 12:08:59 +00:00

database.py

Resolve linter contradictions: consolidate config, fix isort first-party, pylint 10/10

2026-03-29 11:31:15 +00:00

security.py

Resolve linter contradictions: consolidate config, fix isort first-party, pylint 10/10

2026-03-29 11:31:15 +00:00