44 lines
2.2 KiB
Python
44 lines
2.2 KiB
Python
|
# coding=utf-8
|
|||
|
|
"""
|
|||
|
|
@project: maxkb
|
|||
|
|
@Author：虎
|
|||
|
|
@file： cross_domain_middleware.py
|
|||
|
|
@date：2024/5/8 13:36
|
|||
|
|
@desc:
|
|||
|
|
"""
|
|||
|
|
from django.db.models import QuerySet
|
|||
|
|
from django.http import HttpResponse
|
|||
|
|
from django.utils.deprecation import MiddlewareMixin
|
|||
|
|
|
|||
|
|
from application.models.api_key_model import ApplicationApiKey
|
|||
|
|
|
|||
|
|
|
|||
|
|
class CrossDomainMiddleware(MiddlewareMixin):
|
|||
|
|
|
|||
|
|
def process_request(self, request):
|
|||
|
|
if request.method == 'OPTIONS':
|
|||
|
|
auth = request.META.get('HTTP_AUTHORIZATION')
|
|||
|
|
if auth is not None and str(auth).startswith("application-"):
|
|||
|
|
application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=auth).first()
|
|||
|
|
if application_api_key.allow_cross_domain:
|
|||
|
|
return HttpResponse(status=200,
|
|||
|
|
headers={
|
|||
|
|
"Access-Control-Allow-Origin": "*" if application_api_key.cross_domain_list is None or len(
|
|||
|
|
application_api_key.cross_domain_list) == 0 else ",".join(
|
|||
|
|
application_api_key.cross_domain_list),
|
|||
|
|
"Access-Control-Allow-Methods": "GET,POST,DELETE,PUT",
|
|||
|
|
"Access-Control-Allow-Headers": "Origin,X-Requested-With,Content-Type,Accept,Authorization,token"})
|
|||
|
|
|
|||
|
|
def process_response(self, request, response):
|
|||
|
|
auth = request.META.get('HTTP_AUTHORIZATION')
|
|||
|
|
if auth is not None and str(auth).startswith("application-"):
|
|||
|
|
application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=auth).first()
|
|||
|
|
if application_api_key.allow_cross_domain:
|
|||
|
|
response['Access-Control-Allow-Origin'] = "*" if application_api_key.cross_domain_list is None or len(
|
|||
|
|
application_api_key.cross_domain_list) == 0 else ",".join(
|
|||
|
|
application_api_key.cross_domain_list)
|
|||
|
|
response['Access-Control-Allow-Methods'] = 'GET,POST,DELETE,PUT'
|
|||
|
|
response[
|
|||
|
|
'Access-Control-Allow-Headers'] = "Origin,X-Requested-With,Content-Type,Accept,Authorization,token"
|
|||
|
|
return response
|