feat(api): add cors headers middleware (#2479)

This commit is contained in:
Jonas L 2023-03-23 15:40:30 +01:00 committed by GitHub
parent 1bf46b2de4
commit 7962c0adf6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
5 changed files with 18 additions and 0 deletions

View file

@ -25,9 +25,11 @@ INSTALLED_APPS = [
"rest_framework",
"django_filters",
"drf_spectacular",
"corsheaders",
]
MIDDLEWARE = [
"corsheaders.middleware.CorsMiddleware",
"django.middleware.security.SecurityMiddleware",
"django.contrib.sessions.middleware.SessionMiddleware",
"django.middleware.common.CommonMiddleware",

View file

@ -39,6 +39,18 @@ ALLOWED_HOSTS = ["*"]
LOGGING = setup_logger(LIBRETIME_LOG_FILEPATH)
# CORS
# https://github.com/adamchainz/django-cors-headers
# Create an 'origin' by removing the public_url path
public_url_origin = (
CONFIG.general.public_url[: -len(CONFIG.general.public_url.path)]
if CONFIG.general.public_url.path
else CONFIG.general.public_url
)
CORS_ALLOWED_ORIGINS = [public_url_origin] + CONFIG.general.allowed_cors_origins
# Database
# https://docs.djangoproject.com/en/3.2/ref/settings/#databases