Remove CORS headers handling from add_cors_headers_response_callback function

1 parent d80d8065
......@@ -69,31 +69,32 @@ def has_modules(module_name, context=None):
def add_cors_headers_response_callback(event):
def cors_headers(request, response):
origin = request.headers.get("Origin", None)
allowed_origin = get_params("allowed_origin", None)
if allowed_origin:
if origin not in allowed_origin.split('\n'):
origin = "null"
headers = {
'Access-Control-Allow-Methods': 'POST,GET,DELETE,PUT,OPTIONS',
'Access-Control-Allow-Headers': 'Origin, Content-Type, Accept, Authorization',
'Access-Control-Max-Age': '1728000',
}
pass
# origin = request.headers.get("Origin", None)
# allowed_origin = get_params("allowed_origin", None)
# if allowed_origin:
# if origin not in allowed_origin.split('\n'):
# origin = "null"
# headers = {
# 'Access-Control-Allow-Methods': 'POST,GET,DELETE,PUT,OPTIONS',
# 'Access-Control-Allow-Headers': 'Origin, Content-Type, Accept, Authorization',
# 'Access-Control-Max-Age': '1728000',
# }
# _logging.info(f"{origin} {request.is_xhr}")
# response.headers.update(
# {'Access-Control-Allow-Credential': 'true',
# 'Access-Control-Allow-Origin': "*"}
# )
if origin:
headers['Access-Control-Allow-Origin'] = origin
else:
headers['Access-Control-Allow-Origin'] = "*"
if 'Access-Control-Allow-Credentials' not in headers:
headers['Access-Control-Allow-Credentials'] = 'true'
# if origin:
# headers['Access-Control-Allow-Origin'] = origin
# else:
# headers['Access-Control-Allow-Origin'] = "*"
# if 'Access-Control-Allow-Credentials' not in headers:
# headers['Access-Control-Allow-Credentials'] = 'true'
_logging.debug(f"Headers: {headers}")
response.headers.update(headers)
# _logging.debug(f"Headers: {headers}")
# response.headers.update(headers)
event.request.add_response_callback(cors_headers)
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!