Commit a4e8114f by aagusti

allow-origin

1 parent f8cce6d8
...@@ -92,22 +92,25 @@ def add_cors_headers_response_callback(event): ...@@ -92,22 +92,25 @@ def add_cors_headers_response_callback(event):
if origin not in allowed_origin.split('\n'): if origin not in allowed_origin.split('\n'):
origin = None origin = None
response.headers.update({ headers = {
# 'Access-Control-Allow-Origin': '*', # 'Access-Control-Allow-Origin': '*',
'Access-Control-Allow-Methods': 'POST,GET,DELETE,PUT,OPTIONS', 'Access-Control-Allow-Methods': 'POST,GET,DELETE,PUT,OPTIONS',
'Access-Control-Allow-Headers': 'Origin, Content-Type, Accept, Authorization', 'Access-Control-Allow-Headers': 'Origin, Content-Type, Accept, Authorization',
'Access-Control-Allow-Credentials': 'true', 'Access-Control-Allow-Credentials': 'true',
'Access-Control-Max-Age': '1728000', 'Access-Control-Max-Age': '1728000',
}) }
log.info(f"{origin} {request.is_xhr}") log.info(f"{origin} {request.is_xhr}")
response.headers.update( # response.headers.update(
{'Access-Control-Allow-Credential': 'true', # {'Access-Control-Allow-Credential': 'true',
'Access-Control-Allow-Origin': "*"} # 'Access-Control-Allow-Origin': "*"}
) # )
if origin: if origin:
response.headers.update( headers['Access-Control-Allow-Origin'] = origin
{'Access-Control-Allow-Origin': origin} else:
) headers['Access-Control-Allow-Origin'] = "*"
log.info(f"Headers: {headers}")
response.headers.update(headers)
event.request.add_response_callback(cors_headers) event.request.add_response_callback(cors_headers)
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!