allowed_request_origins = [

app.py

@@ -664,9 +664,19 @@ def init_params(request: gr.Request):
 
         # check if origin is from junyiacademy
         query_params = dict(request.query_params)
-        origin = request.headers.get("origin", "")
-        if "junyiacademy.org" in origin or "junyiacademy.appspot.com" in origin:
+        request_origin = request.headers.get("origin", "").replace("https://", "").replace("http://", "")
+        print(f"request_origin: {request_origin}")
+        allowed_request_origins = [
+            "junyiacademy.org", 
+            "junyiacademy.appspot.com", 
+            "colearn30.com", # 樂寫網
+            "huggingface.co", 
+            "localhost:7860"
+        ]
+        if any(allowed_origin in request_origin for allowed_origin in allowed_request_origins):
             pass
+        else:
+            raise gr.Error("Invalid origin")
         
         if "language" in query_params:
             if query_params["language"] == "english":
@@ -679,17 +689,9 @@ def init_params(request: gr.Request):
                 chinese_group = gr.update(visible=True)
         
 
-    return english_group, chinese_group
+    return request_origin, english_group, chinese_group
 
 def update_english_grapragh_practice_rows(selected_tab):    
-    # outputs=[
-    #                 english_grapragh_practice_row,
-    #                 english_grapragh_evaluate_row,
-    #                 english_exam_practice_row,
-    #                 english_grapragh_practice_button,
-    #                 english_grapragh_evaluate_button,
-    #                 english_exam_practice_tab_button
-    #             ]
     if selected_tab == "📝 英文段落寫作練習":
         gr_update_english_grapragh_practice_row = gr.update(visible=True)
         gr_update_english_grapragh_evaluate_row = gr.update(visible=False)
@@ -768,6 +770,10 @@ english_exam_practice_tab_button_js = """
 
 with gr.Blocks(theme=gr.themes.Soft(primary_hue=gr.themes.colors.blue, secondary_hue=gr.themes.colors.orange), css=CSS) as demo:
 
+    with gr.Row(visible=True) as admin_group:
+        user_data = gr.Textbox(label="User Data", value="")
+        request_origin = gr.Textbox(label="Request Domain", value="")
+
     with gr.Row(visible=False) as english_group:
         with gr.Column():
             with gr.Row() as page_title_english:
@@ -2121,6 +2127,7 @@ with gr.Blocks(theme=gr.themes.Soft(primary_hue=gr.themes.colors.blue, secondary
         init_params, 
         inputs =[],
         outputs = [
+            request_origin,
             english_group,
             chinese_group
         ]