解决跨域的两种方式

最新推荐文章于 2022-01-21 10:41:29 发布

qq_571516248

最新推荐文章于 2022-01-21 10:41:29 发布

阅读量154

点赞数

本文介绍了两种在Django项目中解决跨域资源共享（CORS）的方法：一是通过自定义中间件并进行全局或局部配置；二是使用第三方库django-cors-headers。这两种方式都能有效地帮助开发者解决前后端分离项目中的跨域问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

方案一:

全局配置

自定义中间件

# my_md.py
class MiddlewareMixin(object):
    def __init__(self, get_response=None):
        self.get_response = get_response
        super(MiddlewareMixin, self).__init__()

    def __call__(self, request):
        response = None
        if hasattr(self, 'process_request'):
            response = self.process_request(request)
        if not response:
            response = self.get_response(request)
        if hasattr(self, 'process_response'):
            response = self.process_response(request, response)
        return response


class CORSMiddleware(MiddlewareMixin):
    def process_response(self,request,response):
        # 添加响应头

        # 允许你的域名来获取我的数据
        response['Access-Control-Allow-Origin'] = "*"

        # 允许你携带Content-Type请求头
        # response['Access-Control-Allow-Headers'] = "Content-Type"

        # 允许你发送DELETE,PUT
        # response['Access-Control-Allow-Methods'] = "DELETE,PUT"
        return response


# setting.py
MIDDLEWARE = [
    'app1.my_md.CORSMiddleware',
]

局部配置

from django.http import JsonResponse


ret={'code':1000, 'data':list(Course.objects.all().values())}
response = JsonResponse(ret)
response['Access-Control-Allow-Origin'] = "*"
return response