add cors headers

dori-dev · Mar 24, 2023 · df04ad9 · df04ad9
1 parent cb72b0d
commit df04ad9
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 7 deletions.
diff --git a/requirements/production.txt b/requirements/production.txt
@@ -1,2 +1,3 @@
 -r common.txt
-gunicorn==20.1.0
+gunicorn==20.1.0
+django-cors-headers==3.14.0
diff --git a/src/config/settings/development.py b/src/config/settings/development.py
@@ -1,18 +1,15 @@
 from .base import *
 
-THIRD_PARTY_APPS = [
- 'django_extensions',
- 'debug_toolbar',
-]
 
 INSTALLED_APPS = [
  *BASE_INSTALLED_APPS,
- *THIRD_PARTY_APPS,
+ 'django_extensions',
+ 'debug_toolbar',
 ]
 
 MIDDLEWARE = [
- "debug_toolbar.middleware.DebugToolbarMiddleware",
  *BASE_MIDDLEWARE,
+ "debug_toolbar.middleware.DebugToolbarMiddleware",
 ]
 
 DEBUG = True

diff --git a/src/config/settings/production.py b/src/config/settings/production.py
@@ -4,15 +4,18 @@
 
 INSTALLED_APPS = [
  *BASE_INSTALLED_APPS,
+ 'corsheaders',
 ]
 
 MIDDLEWARE = [
  *BASE_MIDDLEWARE,
+ 'corsheaders.middleware.CorsMiddleware',
 ]
 
 DEBUG = True
 
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '').split(',')
+CSRF_TRUSTED_ORIGINS = [f"https://{host}" for host in ALLOWED_HOSTS]
 
 STATIC_ROOT = os.getenv('STATIC_ROOT', 'staticfiles')