feat: support cross-origin

Author: leafcoder

covid19/settings.py

@@ -38,6 +38,7 @@
     'django.contrib.messages',
     'django.contrib.staticfiles',
 
+    'corsheaders',
     'django_crontab',
     'rest_framework',
     'django_filters',
@@ -47,6 +48,7 @@
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -145,6 +147,37 @@
     }
 }
 
+#跨域增加忽略
+CORS_ALLOW_CREDENTIALS = True
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_ORIGIN_WHITELIST = (
+    '*'
+)
+
+CORS_ALLOW_METHODS = (
+    'DELETE',
+    'GET',
+    'OPTIONS',
+    'PATCH',
+    'POST',
+    'PUT',
+    'VIEW',
+)
+
+CORS_ALLOW_HEADERS = (
+    'XMLHttpRequest',
+    'X_FILENAME',
+    'accept-encoding',
+    'authorization',
+    'content-type',
+    'dnt',
+    'origin',
+    'user-agent',
+    'x-csrftoken',
+    'x-requested-with',
+    'Pragma',
+)
+
 CRONTAB_LOCK_JOBS = True
 
 # 静态文件目录

requirements.txt

@@ -7,6 +7,7 @@ constantly==15.1.0
 cryptography==2.9
 cssselect==1.1.0
 Django==2.2.12
+django-cors-headers==3.2.1
 django-crontab==0.7.1
 django-filter==2.2.0
 django-mysql==3.4.0