Fix Google Login CORS and role-based redirection

backend/app/main.py

@@ -110,12 +110,19 @@ app = FastAPI(
 )
 
 # CORS middleware
-origins = ["*"]  # Permitir todos para producción corregida
-
+origins = [
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "https://sibu-frontend.vercel.app",
+    "https://sibu-transport.web.app",
+    "https://sibu2-0-transport-2026.firebaseapp.com",
+    "https://sibu2-0-transport-2026.web.app",
+]
 
 app.add_middleware(
     CORSMiddleware,
     allow_origins=origins,
+    allow_origin_regex="https://.*sibu.*\.vercel\.app", # Permitir subdominios de vercel con 'sibu'
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],