mirror of
https://github.com/ArchiveBox/ArchiveBox.git
synced 2026-09-13 18:46:17 +05:00
ec4b27056e
Some checks failed
CodeQL / Analyze (${{ matrix.language }}) (none, python) (push) Has been cancelled
Build Debian package / build (push) Has been cancelled
Deploy static content to Pages / deploy (push) Has been cancelled
Build Homebrew package / build (push) Has been cancelled
Build GitHub Pages website / build (push) Has been cancelled
Run linters / lint (push) Has been cancelled
Build Pip package / build (push) Has been cancelled
Parallel Tests / Discover test files (push) Has been cancelled
Run tests / python_tests (ubuntu-22.04, 3.13) (push) Has been cancelled
Run tests / docker_tests (push) Has been cancelled
Build GitHub Pages website / deploy (push) Has been cancelled
Parallel Tests / ${{ matrix.test.name }} (push) Has been cancelled
35 lines
1.2 KiB
Python
35 lines
1.2 KiB
Python
__package__ = 'archivebox.api'
|
|
|
|
from django.http import HttpResponse
|
|
|
|
|
|
class ApiCorsMiddleware:
|
|
"""Attach permissive CORS headers for API routes (token-based auth)."""
|
|
|
|
def __init__(self, get_response):
|
|
self.get_response = get_response
|
|
|
|
def __call__(self, request):
|
|
if request.path.startswith('/api/'):
|
|
if request.method == 'OPTIONS' and request.META.get('HTTP_ACCESS_CONTROL_REQUEST_METHOD'):
|
|
response = HttpResponse(status=204)
|
|
return self._add_cors_headers(request, response)
|
|
|
|
response = self.get_response(request)
|
|
return self._add_cors_headers(request, response)
|
|
|
|
return self.get_response(request)
|
|
|
|
def _add_cors_headers(self, request, response):
|
|
origin = request.META.get('HTTP_ORIGIN')
|
|
if not origin:
|
|
return response
|
|
|
|
response['Access-Control-Allow-Origin'] = '*'
|
|
response['Access-Control-Allow-Methods'] = 'GET, POST, PUT, PATCH, DELETE, OPTIONS'
|
|
response['Access-Control-Allow-Headers'] = (
|
|
'Authorization, X-ArchiveBox-API-Key, Content-Type, X-CSRFToken'
|
|
)
|
|
response['Access-Control-Max-Age'] = '600'
|
|
return response
|