Django drf：手撸自定义跨域

项目需求：

　　1.用域名8000向8001发送请求，用django框架解决跨域问题

　　2.用上自定义中间件配置，支持get、post、put、detele和非简单请求

　　3.支持版本控制

　　4.在setting中配置白名单列表，在表中域名可以访问，否则返回错误信息

# 首先8000端口url层设置路由

from django.conf.urls import url

from django.contrib import admin

from app import views

urlpatterns = [

    url(r'^admin/', admin.site.urls),

    url(r'^index/', views.test),

]

#写test视图函数

from django.views.decorators.cache import cache_page

import time

from rest_framework.response import Response

# 单页面缓存10秒

# @cache_page(10)

def test(request):

    print('三儿来了！')

    ctime = time.time()

    return render(request,'index.html',locals())

# 模板层写index模板（这里用到ajax向后台提交数据，需要引入bootstop且在setting中配置）

<!DOCTYPE html>

<html>

<head>

    <meta charset="UTF-8">

    <script src="/static/jquery-3.3.1.js"></script>

    <title>Title</title>

</head>

<body>

不缓存

{{ ctime }}

<br>

存在的缓存

{#{% load cache %}#}

{#第一个是超时时间，缓存时间。第二个参数是Key值，别名。#}

{#{% cache 10 'test' %}#}

{#    {{ ctime }}#}

{#{% endcache %}#}

<button id="btn">点我发请求</button>

</body>

<script>

    $("#btn").click(function () {

        $.ajax({

            url: 'http://127.0.0.1:8001/v1/publishs/',

            {#type: 'get',#}

            type:'post',

            {#type:'put',#}

            contentType:'application/json',

            {#data:JSON.stringify({'name':'egon'}),#}

            success: function (data) {

                console.log(data)

            }

        })

    })

</script>

</html>

# ajax提交的路由请求http://127.0.0.1:8001/v1/publishs/

# 由于请求的是V1版本，我们在端口8001路由层中设置版本路由

from django.conf.urls import url

from django.contrib import admin

from app import views

urlpatterns = [

    url(r'^admin/', admin.site.urls),

    url(r'^(?P<version>[v1|v2]+)/publishs/', views.PublishView.as_view()),

]

# 写对应的的函数视图

from rest_framework.views import APIView

from rest_framework.versioning import URLPathVersioning

from rest_framework.response import Response

# 版本控制的局部使用

class PublishView(APIView):

    # versioning_class = QueryParameterVersioning # 基于url的get传参方法

    versioning_class = URLPathVersioning # 基于url的正则方式

    def get(self,request,*args,**kwargs):

        print(request.version)

        return Response({'status':100})

    def post(self,request,*args,**kwargs):

        print(request.method)

        return Response({'status': 100, 'msg': 'post'})

    def delete(self,request,*args,**kwargs):

        print(request.method)

        return Response({'status':100,'msg':'delete'})

    def put(self,request,*args,**kwargs):

        print(request.method)

        return Response({'status':100,'msg':'put'})

#这个时候写定义中间件

from django.utils.deprecation import MiddlewareMixin

from django.conf import settings

from rest_framework.response import Response

from django.http import JsonResponse

class CORSMiddle(MiddlewareMixin):

    def process_response(self,request,response):

        #

        # print(request.META['HTTP_ORIGIN'])

        host_list = settings.OPEN_HOST

        host = request.META['HTTP_ORIGIN']

        response['Access-Control-Allow-Origin'] = host

        if request.method == 'OPTIONS':

            response['Access-Control-Allow-Methods'] = 'PUT,DELETE,POST,GET'

            response['Access-Control-Allow-Headers'] = 'Content-Type'

        print(host,host_list)

        if host not in host_list:

            # rep = JsonResponse({'msg':'error  非法访问！'})

            rep = Response({'msg':'error  非法访问！'})

            rep['Access-Control-Allow-Origin'] = host

            return rep

        return response

# 自定义中间需要到setting中做配置，且把csrf注销

MIDDLEWARE = [

    'django.middleware.security.SecurityMid'

    ''

    'dleware',

    'django.contrib.sessions.middleware.SessionMiddleware',

    'django.middleware.common.CommonMiddleware',

    # 'django.middleware.csrf.CsrfViewMiddleware',

    'app.center.CORSMiddle',# 此为自定义中间件

    'django.contrib.auth.middleware.AuthenticationMiddleware',

    'django.contrib.messages.middleware.MessageMiddleware',

    'django.middleware.clickjacking.XFrameOptionsMiddleware',

]

# 后面需要在setting中自定义白名单

OPEN_HOST = ['http://127.0.0.1:8002','http://127.0.0.1:8003']

巴特西

Django drf：手撸自定义跨域

最新文章

热门文章