# backend/middleware.py

class MediaCORSMiddleware:
    def __init__(self, get_response):
        self.get_response = get_response

    def __call__(self, request):
        response = self.get_response(request)
        if request.path.startswith('/media/'):
            print("MediaCORSMiddleware: Adding CORS headers to", request.path)
            response['Access-Control-Allow-Origin'] = 'https://aranest.com'
            response['Access-Control-Allow-Methods'] = 'GET, OPTIONS'
            response['Access-Control-Allow-Headers'] = 'Origin, Content-Type, Accept, Authorization'
        return response