rearrange middleware

cmd/start.go

@@ -49,14 +49,18 @@ var startCmd = &cobra.Command{
 		// Register auth handlers
 		authConfig.RegisterHandlers(httpRequestRouter)
 
+		// Create CORS configuration
+		corsConfig := middleware.DefaultCORSConfig()
+
 		// Create middleware stack
 		stack := middleware.CreateStack(
+			middleware.RequestID(),             // Generate a unique request ID
 			middleware.Logging(),               // Log requests with structured logging
 			middleware.Recovery(),              // Catch all panics
 			middleware.Timeout(32*time.Second), // Set request timeout
-			middleware.RequestID(),             // Generate a unique request ID
 			middleware.MaxBodySize(1024*1024),  // 1MB size limit
 			middleware.SecureHeaders(),         // Set secure headers
+			middleware.CORS(corsConfig),        // CORS configuration
 			authConfig.Middleware(),            // OIDC authentication middleware
 		)