mirror of
https://github.com/fergalmoran/dss.git
synced 2026-01-06 08:54:12 +00:00
40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
from django import http
|
|
|
|
try:
|
|
import settings
|
|
XS_SHARING_ALLOWED_ORIGINS = settings.XS_SHARING_ALLOWED_ORIGINS
|
|
XS_SHARING_ALLOWED_METHODS = settings.XS_SHARING_ALLOWED_METHODS
|
|
except:
|
|
XS_SHARING_ALLOWED_ORIGINS = '*'
|
|
XS_SHARING_ALLOWED_METHODS = ['POST','GET','OPTIONS', 'PUT', 'DELETE']
|
|
|
|
|
|
class XsSharingMiddleware(object):
|
|
"""
|
|
This middleware allows cross-domain XHR using the html5 postMessage API.
|
|
|
|
|
|
Access-Control-Allow-Origin: http://foo.example
|
|
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
|
|
"""
|
|
def process_request(self, request):
|
|
|
|
if 'HTTP_ACCESS_CONTROL_REQUEST_METHOD' in request.META:
|
|
response = http.HttpResponse()
|
|
response['Access-Control-Allow-Origin'] = XS_SHARING_ALLOWED_ORIGINS
|
|
response['Access-Control-Allow-Methods'] = ",".join( XS_SHARING_ALLOWED_METHODS )
|
|
|
|
return response
|
|
|
|
return None
|
|
|
|
def process_response(self, request, response):
|
|
# Avoid unnecessary work
|
|
if response.has_header('Access-Control-Allow-Origin'):
|
|
return response
|
|
|
|
response['Access-Control-Allow-Origin'] = XS_SHARING_ALLOWED_ORIGINS
|
|
response['Access-Control-Allow-Methods'] = ",".join( XS_SHARING_ALLOWED_METHODS )
|
|
|
|
return response
|