# 1、安裝第三方庫 django-cors-headers
# 2、在settings.py中添加'corsheaders.middleware.CorsMiddleware',在SessionMiddleware和CommonMiddleware的中間
# 3、在INSTALLED_APPS里添加“corsheaders”
INSTALLED_APPS = [
    'search.apps.SearchConfig',
    'data.apps.DataConfig',
    'record_data.apps.RecordDataConfig',
    'deleted_data.apps.DeletedDataConfig',
    'mgmt.apps.MgmtConfig',
    'c_test.apps.CTestConfig',
    'rest_framework',
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'corsheaders',  # 新增
]
# 4、在中間件中添加corsheaders.middleware.CorsMiddleware,django.middleware.common.CommonMiddleware
MIDDLEWARE = [
    # 'utils.middleware.ExceptionMiddleware',
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'corsheaders.middleware.CorsMiddleware',  # 新增/必須在common中間件上面
    'django.middleware.common.CommonMiddleware',
    # 'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]
# 5、在settings.py底部增加
CORS_ALLOW_CREDENTIALS = True  # 允許攜帶cookie
CORS_ORIGIN_ALLOW_ALL = True  # 放行所有
CORS_ORIGIN_WHITELIST = ('*')  # 白名單
# CORS_ALLOW_METHODS：字符串列表，允許用哪些HTTP請求方法。
CORS_ALLOW_METHODS = (
    'DELETE',
    'GET',
    'OPTIONS',
    'PATCH',
    'POST',
    'PUT',
    'VIEW',
)
# CORS_ALLOW_HEADERS：字符串列表，允許使用哪些非標準HTTP請求頭。
CORS_ALLOW_HEADERS = (
    'accept',
    'accept-encoding',
    'authorization',
    'content-type',
    'dnt',
    'origin',
    'user-agent',
    'x-csrftoken',
    'x-requested-with',
)

# 可以自己注冊一個中間件，在中間件process_response方法中對response進行封裝
def process_response(self, request, response):
    response["Content-Type"] = "application/json"  # 響應信息的內容格式
    response["Access-Control-Allow-Origin"] = "*"  # 允許跨域請求的源地址， * 表示：允許所有地址
    response["Access-Control-Allow-Methods"] = "POST, GET, OPTIONS"  # 允許跨域請求的具體方法
    response["Access-Control-Max-Age"] = "1000"  # 用來指定本次預檢請求的有效期，單位為秒，，在此期間不用發出另一條預檢請求。
    response["Access-Control-Allow-Headers"] = "*"
    return response