安装

pip install django-cors-headers

注册应用

INSTALLED_APPS = (
    ...
    'corsheaders',
    ...

)

中间层设置

MIDDLEWARE = [
    'corsheaders.middleware.CorsMiddleware',
    ...
]

添加白名单

# CORS
CORS_ORIGIN_WHITELIST = (
    '127.0.0.1:8080',
    'localhost:8080',
    'www.xxxx.com:8080',
    'api.xxxx.com:8000'
)
CORS_ALLOW_CREDENTIALS = True  # 允许携带cookie

ALLOWED_HOSTS = ['www.xxxx.com:8080','api.xxxx.com:8000','127.0.0.1']

前端需要携带cookies访问后端时,需要设置

withCredentials: true