在Django中，从浏览器进行PUT请求时持续收到CORS错误。

huangapple
go评论95阅读模式
英文:

Keep getting a CORS error for put requests in Django from browser

问题

以下是翻译好的内容：

我在从前端应用程序（使用Fetch API）向我的Django服务器发出PUT请求时不断收到CORS错误，但在Postman中没有问题。以下是错误信息：

跨域请求被阻止：同源策略不允许读取远程资源 https://q72y0iroi2.execute-api.us-west-2.amazonaws.com/weightsheets/636。 （原因：缺少CORS头'Access-Control-Allow-Origin'）。状态码：503。

不知何故，GET、POST和DELETE请求都正常工作。

我已尝试了django-cors-headers文档中建议的所有设置，但无济于事！

任何建议将不胜感激。

这是我的settings.py文件内容。

英文:

I keep getting a CORS error when I make a put request to my Django server from my frontend application (Fetch API) but not from Postman. Here is the error:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://q72y0iroi2.execute-api.us-west-2.amazonaws.com/weightsheets/636. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing). Status code: 503.

Somehow GET, POST and DELETE requests are working fine.

I have tried all the settings suggested in the documentation for django-cors-headers but to no avail!

Any advice would be highly appreciated

Here is my settings.py:

  1. BASE_DIR = Path(__file__).resolve().parent.parent
  3. SECRET_KEY = os.getenv("DJANGO_SECRET_KEY", get_random_secret_key())
  5. DEBUG = os.getenv("DEBUG", "False")
  7. ALLOWED_HOSTS = ['*']
  9. DEVELOPMENT_MODE = os.getenv("DEVELOPMENT_MODE", "False")
  12. # Application definition
  14. INSTALLED_APPS = [
  15.     'django.contrib.admin',
  16.     'django.contrib.auth',
  17.     'django.contrib.contenttypes',
  18.     'django.contrib.sessions',
  19.     'django.contrib.messages',
  20.     'django.contrib.staticfiles',
  21.     'rest_framework',
  22.     'rest_framework.authtoken',
  23.     'corsheaders',
  24.     'weighttrackingapi',
  25. ]
  27. REST_FRAMEWORK = {
  28.     'DEFAULT_AUTHENTICATION_CLASSES': (
  29.         'rest_framework.authentication.TokenAuthentication',
  30.     ),
  31.     'DEFAULT_PERMISSION_CLASSES': [
  32.         'rest_framework.permissions.IsAuthenticated',
  33.     ],
  34. }
  36. # List of allowed origins
  38. CORS_ALLOW_ALL_ORIGINS = True
  40. CORS_ALLOW_METHODS = (
  41.     "DELETE",
  42.     "GET",
  43.     "OPTIONS",
  44.     "PATCH",
  45.     "POST",
  46.     "PUT",
  47. )
  49. CORS_ALLOW_HEADERS = (
  50.     "accept",
  51.     "authorization",
  52.     "content-type",
  53.     "user-agent",
  54.     "x-csrftoken",
  55.     "x-requested-with",
  56. )
  57. CORS_ALLOW_CREDENTIALS = True
  61. MIDDLEWARE = [
  62.     'corsheaders.middleware.CorsMiddleware',
  63.     'django.middleware.common.CommonMiddleware',
  64.     'django.middleware.security.SecurityMiddleware',
  65.     'django.contrib.sessions.middleware.SessionMiddleware',
  66.     'django.middleware.csrf.CsrfViewMiddleware',
  67.     'django.contrib.auth.middleware.AuthenticationMiddleware',
  68.     'django.contrib.messages.middleware.MessageMiddleware',
  69.     'django.middleware.clickjacking.XFrameOptionsMiddleware',
  70. ]
  73. ROOT_URLCONF = 'weighttracking.urls'
  75. TEMPLATES = [
  76.     {
  77.         'BACKEND': 'django.template.backends.django.DjangoTemplates',
  78.         'DIRS': [],
  79.         'APP_DIRS': True,
  80.         'OPTIONS': {
  81.             'context_processors': [
  82.                 'django.template.context_processors.debug',
  83.                 'django.template.context_processors.request',
  84.                 'django.contrib.auth.context_processors.auth',
  85.                 'django.contrib.messages.context_processors.messages',
  86.             ],
  87.         },
  88.     },
  89. ]
  91. WSGI_APPLICATION = 'weighttracking.wsgi.application'
  94. # Database
  95. # https://docs.djangoproject.com/en/4.1/ref/settings/#databases
  98. DATABASES = {
  99.     'default': {
  100.         'ENGINE': 'django.db.backends.postgresql',
  101.         'NAME': 'railway',
  102.         'USER' : 'postgres',
  103.         'PASSWORD' : '*****************',
  104.         'HOST' : 'containers-us-west-11.railway.app',
  105.         'PORT' : '7866',
  106.     }
  107. }
  110. # Password validation
  111. # https://docs.djangoproject.com/en/4.1/ref/settings/#auth-password-validators
  113. AUTH_PASSWORD_VALIDATORS = [
  114.     {
  115.         'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
  116.     },
  117.     {
  118.         'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
  119.     },
  120.     {
  121.         'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
  122.     },
  123.     {
  124.         'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
  125.     },
  126. ]
  129. LANGUAGE_CODE = 'en-us'
  131. TIME_ZONE = 'UTC'
  133. USE_I18N = True
  135. USE_TZ = True
  139. STATIC_URL = 'static/'
  140. # STATICFILES_DIRS = [os.path.join(BASE_DIR, 'static')]
  141. STATIC_ROOT =os.path.join(BASE_DIR, 'staticfiles')
  143. # Default primary key field type
  144. # https://docs.djangoproject.com/en/4.1/ref/settings/#default-auto-field
  146. DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'

答案1

得分: 1

  1. DEBUG = True
  3. ALLOWED_HOSTS = ["*"]
  5. # 应用程序定义
  7. INSTALLED_APPS = [
  8.     'django.contrib.admin',
  9.     'django.contrib.auth',
  10.     'django.contrib.contenttypes',
  11.     'django.contrib.sessions',
  12.     'django.contrib.messages',
  13.     'django.contrib.staticfiles',
  14.     'rest_framework',
  15.     'corsheaders', # <-------- 这部分
  16.     'myapp',
  17. ]
  19. MIDDLEWARE = [
  20.     'django.middleware.security.SecurityMiddleware',
  21.     'django.contrib.sessions.middleware.SessionMiddleware',
  22.     'corsheaders.middleware.CorsMiddleware', # <-------- 这部分
  23.     'django.middleware.common.CommonMiddleware',
  24.     'django.middleware.csrf.CsrfViewMiddleware',
  25.     'django.contrib.auth.middleware.AuthenticationMiddleware',
  26.     'django.contrib.messages.middleware.MessageMiddleware',
  27.     'django.middleware.clickjacking.XFrameOptionsMiddleware',
  28.     'sales_company_app.get_user_instance.RequestMiddleware',
  29. ]
  31. REST_FRAMEWORK = {
  32.     'DEFAULT_AUTHENTICATION_CLASSES': (
  33.         'rest_framework.authentication.TokenAuthentication',
  34.     ),
  35. }
  37. CORS_ORIGIN_ALLOW_ALL = True # <-------- 这部分
  38. CORS_ALLOWED_ORIGINS = [
  39.     "http://localhost:3000",    # React (前端 URL) # <-------- 这部分
  40. ]
  42. CORS_ALLOW_HEADERS = '*' # <-------- 这部分
  43. CSRF_TRUSTED_ORIGINS = ["http://192.168.1.155:8000/"] # (Api 基础 URL) <-------- 这部分
  45. ### 注意 - 确保已安装 (pip install django-cors-headers)
英文: 
  1. DEBUG = True
  3. ALLOWED_HOSTS = [&quot;*&quot;]
  6. # Application definition
  8. INSTALLED_APPS = [
  9.     &#39;django.contrib.admin&#39;,
  10.     &#39;django.contrib.auth&#39;,
  11.     &#39;django.contrib.contenttypes&#39;,
  12.     &#39;django.contrib.sessions&#39;,
  13.     &#39;django.contrib.messages&#39;,
  14.     &#39;django.contrib.staticfiles&#39;,
  15.     &#39;rest_framework&#39;,
  16.     &#39;corsheaders&#39;, # &lt;-------- this
  17.     &#39;myapp&#39;,
  18. ]
  20. MIDDLEWARE = [
  21.     &#39;django.middleware.security.SecurityMiddleware&#39;,
  22.     &#39;django.contrib.sessions.middleware.SessionMiddleware&#39;,
  23.     &#39;corsheaders.middleware.CorsMiddleware&#39;, # &lt;-------- this
  24.     &#39;django.middleware.common.CommonMiddleware&#39;,
  25.     &#39;django.middleware.csrf.CsrfViewMiddleware&#39;,
  26.     &#39;django.contrib.auth.middleware.AuthenticationMiddleware&#39;,
  27.     &#39;django.contrib.messages.middleware.MessageMiddleware&#39;,
  28.     &#39;django.middleware.clickjacking.XFrameOptionsMiddleware&#39;,
  29.     &#39;sales_company_app.get_user_instance.RequestMiddleware&#39;,
  30. ]
  34. REST_FRAMEWORK = {
  35.     &#39;DEFAULT_AUTHENTICATION_CLASSES&#39;: (
  36.         &#39;rest_framework.authentication.TokenAuthentication&#39;,
  37.     ),
  38. }
  41. CORS_ORIGIN_ALLOW_ALL = True # &lt;-------- this
  42. CORS_ALLOWED_ORIGINS = [
  43.     &quot;http://localhost:3000&quot;,    # React (FrontEnd Url) # &lt;-------- this
  44. ]
  46. CORS_ALLOW_HEADERS = &#39;*&#39; # &lt;-------- this
  47. CSRF_TRUSTED_ORIGINS = [&quot;http://192.168.1.155:8000/&quot;] # (Api Base Url) &lt;-------- this

NOTE - Make sure must installed (pip install django-cors-headers)

答案2

得分: 0

只需将您的站点添加到Access-Control-Allow-Origin标头中，一切都会没问题。只需像这样执行：

  1. Access-Control-Allow-Origin: 您域名的URL

或者

  1. Access-Control-Allow-Origin: *

我不建议使用底部的选项，除非您知道自己在做什么。

参考链接是：CORS错误代码503

英文:

Just add your site to the Access-Control-Allow-Origin header and you'll be fine. Just do something like

  1. Access-Control-Allow-Origin: url/of/your/domain

or

  1. Access-Control-Allow-Origin: *

I would not recommend doing the bottom one unless you know what you are doing.

Reference would be this: CORS error code 503

huangapple
  • 本文由 发表于 2023年5月29日 23:08:02
  • 转载请务必保留本文链接：https://go.coder-hub.com/76358438.html
  • cors
  • django
  • django-rest-framework
  • put
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定