CORS Issue on Braniac-Platform.com Causes Uploads to Fail

[jlukic]

The BrainIAC Features endpoint returns a CORS error when submitting a scan through the hosted web interface at brainiac-platform.com.

Error:

Access to fetch at 'https://brainiac-features-885179799162.us-central1.run.app/predict'
from origin 'https://www.brainiac-platform.com' has been blocked by CORS policy:
No 'Access-Control-Allow-Origin' header is present on the requested resource.

Steps to reproduce:

1. Go to https://www.brainiac-platform.com
2. Select BrainIAC Features
3. Upload a .nii or .nii.gz file
4. Select input modality (T1), embedding type, and enable preprocessing
5. Click Extract Features
6. Request fails with the above CORS error in the browser console

Expected behavior:
The Cloud Run backend at brainiac-features-885179799162.us-central1.run.app should include Access-Control-Allow-Origin: https://www.brainiac-platform.com (or wildcard) in its response headers.

Likely fix:
The Google Cloud Run service needs CORS headers configured — either at the application level or the proxy/load balancer in front of it.

Environment:

• Browser: Chrome (Linux)
• Date: 2026-02-17