Index: iknow-api/Program.cs
===================================================================
--- iknow-api/Program.cs	(revision c2f79d73d7219c8c8bcc00f5badba27a707b22be)
+++ iknow-api/Program.cs	(revision bb02e3ae85aa5c33bcd8d995468e777bddfe332d)
@@ -9,4 +9,20 @@
 
 var builder = WebApplication.CreateBuilder(args);
+
+// Add CORS policy
+builder.Services.AddCors(options =>
+{
+    options.AddPolicy("AllowFrontend", policy =>
+    {
+        var allowedOrigins = builder.Configuration.GetSection("AllowedOrigins").Get<string[]>() 
+            ?? new[] { "http://localhost:3000" };
+        
+        policy.WithOrigins(allowedOrigins) // Your frontend URL(s)
+              .AllowAnyHeader()
+              .AllowAnyMethod()
+              .AllowCredentials();
+    });
+});
+
 builder.Services.AddAuthentication(options =>
 {
@@ -64,4 +80,7 @@
 }
 
+// Enable CORS - must be called before UseAuthentication and UseAuthorization
+app.UseCors("AllowFrontend");
+
 app.UseHttpsRedirection();
 app.UseAuthentication(); // <-- must come BEFORE UseAuthorization