pip install -i https://pypi.douban.com/simple django-cors-headers
INSTALLED_APPS = [ ‘corsheaders‘, ‘django.contrib.admin‘, ‘django.contrib.auth‘, ‘django.contrib.contenttypes‘, ‘django.contrib.sessions‘, ‘django.contrib.messages‘, ‘django.contrib.staticfiles‘, ‘rest_framework‘, ‘drf_yasg‘ ]
需要添加在CommonMiddleware中间件之前
MIDDLEWARE = [ ‘django.middleware.security.SecurityMiddleware‘, ‘django.contrib.sessions.middleware.SessionMiddleware‘, ‘corsheaders.middleware.CorsMiddleware‘, ‘django.middleware.common.CommonMiddleware‘, ‘django.middleware.csrf.CsrfViewMiddleware‘, ‘django.contrib.auth.middleware.AuthenticationMiddleware‘, ‘django.contrib.messages.middleware.MessageMiddleware‘, ‘django.middleware.clickjacking.XFrameOptionsMiddleware‘, ]
# CORS_ORIGIN_ALLOW_ALL为True,指定所有域名(ip)都可以访问后端接口,默认为False CORS_ORIGIN_ALLOW_ALL = True
也可以通过添加白名单的方式
# CORS_ORIGIN_WHITELIST指定能够访问后端接口的ip或域名列表 CORS_ORIGIN_WHITELIST = [ ‘http://127.0.0.1:8080‘, ‘http://localhost:8080‘, ‘http://192.168.6.23:8080‘ ]
# CORS_ALLOW_CREDENTIALS允许跨域时携带Cookie,默认为False CORS_ALLOW_CREDENTIALS = True
原文:https://www.cnblogs.com/xiaogongjin/p/13380440.html