From 4e8b321ef875991de378c3318904a20aa651e79d Mon Sep 17 00:00:00 2001
From: Claude <claude@littlefake.com>
Date: Mon, 22 Jun 2026 00:08:28 +0000
Subject: [PATCH] =?UTF-8?q?Fix:=20SyntaxError=20in=20main.py=20=E2=80=94?=
 =?UTF-8?q?=20comma=20after=20allow=5Fcredentials=3DFalse?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The SEC-06 replacement swallowed the trailing comma into the comment:
  allow_credentials=False  # comment,  ← comma in comment
Fixed to:
  allow_credentials=False,  # comment  ← comma after value
---
 backend/app/main.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/app/main.py b/backend/app/main.py
index be39c0e..b69ab59 100644
--- a/backend/app/main.py
+++ b/backend/app/main.py
@@ -79,7 +79,7 @@ app = FastAPI(title="Fitness Rewards", version="1.0.0", lifespan=lifespan)
 app.add_middleware(
     CORSMiddleware,
     allow_origins=["*"],
-    allow_credentials=False  # Bearer tokens don't need credentials mode,
+    allow_credentials=False,  # Bearer tokens don't need credentials mode
     allow_methods=["*"],
     allow_headers=["*"],
 )