MIRRORS/layerindex-web
1
0
Fork 0
mirror of git://git.yoctoproject.org/layerindex-web.git synced 2025-07-19 20:59:01 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

adding CORS policy for the API

Browse Source 
We add the corsheaders application in order to
enable the CORS policy for the read-only REST API.

This is needed to allow AJAX queries to the layerindex
application from a browser environment.

Signed-off-by: Alexandru DAMIAN <alexandru.damian@intel.com>
This commit is contained in:
Alexandru DAMIAN 2014-07-16 15:53:29 +01:00 committed by Paul Eggleton
parent 1c9d6be527
commit 1d84f282de
3 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README
View File

@ -26,6 +26,7 @@ In order to make use of this application you will need:
* django-simple-captcha (0.4.1) * django-simple-captcha (0.4.1)
* django-nvd3 (0.6.0) * django-nvd3 (0.6.0)
* djangorestframework (2.3.14) * djangorestframework (2.3.14)
* django-cors-headers (0.12)
* On the machine that will run the backend update script (which does not * On the machine that will run the backend update script (which does not
have to be the same machine as the web server, however it does still have to be the same machine as the web server, however it does still
have to have Django installed, have the same or similar configuration have to have Django installed, have the same or similar configuration

1
requirements.txt
View File

@ -6,6 +6,7 @@ South==0.8.4
Unidecode==0.04.16 Unidecode==0.04.16
argparse==1.2.1 argparse==1.2.1
awesome-slugify==1.5 awesome-slugify==1.5
django-cors-headers==0.12
django-nvd3==0.7.4 django-nvd3==0.7.4
django-registration==0.8 django-registration==0.8
django-reversion==1.6.0 django-reversion==1.6.0

8
settings.py
View File

@ -100,6 +100,7 @@ TEMPLATE_LOADERS = (
) )
MIDDLEWARE_CLASSES = ( MIDDLEWARE_CLASSES = (
'corsheaders.middleware.CorsMiddleware',
'django.middleware.common.CommonMiddleware', 'django.middleware.common.CommonMiddleware',
'django.contrib.sessions.middleware.SessionMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware',
'django.middleware.csrf.CsrfViewMiddleware', 'django.middleware.csrf.CsrfViewMiddleware',
@ -109,6 +110,12 @@ MIDDLEWARE_CLASSES = (
'reversion.middleware.RevisionMiddleware', 'reversion.middleware.RevisionMiddleware',
) )
# We allow CORS calls from everybody
CORS_ORIGIN_ALLOW_ALL = True
# for the API pages
CORS_URLS_REGEX = r'.*/api/.*';
# Clickjacking protection # Clickjacking protection
X_FRAME_OPTIONS = 'DENY' X_FRAME_OPTIONS = 'DENY'
@ -145,6 +152,7 @@ INSTALLED_APPS = (
'captcha', 'captcha',
'south', 'south',
'rest_framework', 'rest_framework',
'corsheaders',
'django_nvd3' 'django_nvd3'
) )