Index: iknow-api/Program.cs
===================================================================
--- iknow-api/Program.cs	(revision f0fc386e116e253982a713c3b986c26be3ab86fb)
+++ iknow-api/Program.cs	(revision 93c368a431f87f49f4df37ae7c04be95baf7f484)
@@ -9,4 +9,20 @@
 
 var builder = WebApplication.CreateBuilder(args);
+
+// Add CORS policy
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy("AllowFrontend", policy =>
+    {
+        var allowedOrigins = builder.Configuration.GetSection("AllowedOrigins").Get<string[]>() 
+            ?? new[] { "http://localhost:3000" };
+        
+        policy.WithOrigins(allowedOrigins) // Your frontend URL(s)
+              .AllowAnyHeader()
+              .AllowAnyMethod()
+              .AllowCredentials();
+    });
+});
+
 builder.Services.AddAuthentication(options =>
 {
@@ -64,4 +80,7 @@
 }
 
+// Enable CORS - must be called before UseAuthentication and UseAuthorization
+app.UseCors("AllowFrontend");
+
 app.UseHttpsRedirection();
 app.UseAuthentication(); // <-- must come BEFORE UseAuthorization