[update] CORS header support

Kyutech-C3 · Jul 7, 2021 · 0a511e5 · 0a511e5
1 parent 3291eea
commit 0a511e5
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/server/server/settings/base.py b/server/server/settings/base.py
@@ -32,15 +32,16 @@
     'django.contrib.sessions',
     'django.contrib.messages',
     'django.contrib.staticfiles',
+    'corsheaders',
     'colorfield',
     'works',
     'storages',
-    'corsheaders',
     'rest_framework'
 ]
 
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'whitenoise.middleware.WhiteNoiseMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
@@ -127,6 +128,11 @@
     },
 ]
 
+CORS_ALLOWED_ORIGINS = [
+    'https://shared-vps.compositecomputer.club',
+    'http://localhost:3000'
+]
+
 
 # Internationalization
 # https://docs.djangoproject.com/en/3.0/topics/i18n/
@@ -151,8 +157,4 @@
 STATICFILES_STORAGE = 'whitenoise.storage.CompressedManifestStaticFilesStorage'
 
 MEDIA_ROOT = os.path.join(BASE_DIR, "media")
-MEDIA_URL = '/media/'
-
-CORS_ALLOWED_ORIGINS = [
-    'http://*'
-]
+MEDIA_URL = '/media/'
diff --git a/server/server/settings/development.py b/server/server/settings/development.py
@@ -21,6 +21,7 @@
 
 ALLOWED_HOSTS = ["*"]
 
+CORS_ALLOW_ALL_ORIGINS = True
 
 # Database
 # https://docs.djangoproject.com/en/3.0/ref/settings/#databases