discours.io/core
5
0
Fork 0
Code Pull Requests Actions Projects Activity

corsfix-34

Browse Source
This commit is contained in:
Untone 2024-12-24 14:22:49 +03:00
parent dcbdd01f53
commit 5e1021a18e
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nginx.conf.sigil
View File

@ -6,7 +6,11 @@
{{ $cors_headers_get := "if ($request_method = 'GET') { add_header 'Access-Control-Allow-Origin' '$allow_origin' always; add_header 'Access-Control-Allow-Methods' 'POST, GET, OPTIONS' always; add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization' always; add_header 'Access-Control-Allow-Credentials' 'true' always; }" }} {{ $cors_headers_get := "if ($request_method = 'GET') { add_header 'Access-Control-Allow-Origin' '$allow_origin' always; add_header 'Access-Control-Allow-Methods' 'POST, GET, OPTIONS' always; add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization' always; add_header 'Access-Control-Allow-Credentials' 'true' always; }" }}
map $http_origin $allow_origin { map $http_origin $allow_origin {
~^https?:\/\/((.*\.)?localhost(:\d+)?|discoursio-webapp(-(.*))?\.vercel\.app|(.*\.)?discours\.io|(.*\.)?dscrs\.site)$ $http_origin; ~^https?:\/\/(.*\.)?localhost(:\d+)?$ $http_origin;
~^https?:\/\/(.*\.)?discours\.io$ $http_origin;
~^https?:\/\/(.*\.)?dscrs\.site$ $http_origin;
~^https?:\/\/testing\.(discours\.io|dscrs\.site)$ $http_origin;
~^https?:\/\/discoursio-webapp(-.*)?\.vercel\.app$ $http_origin;
default ""; default "";
} }

10
services/auth.py
View File

@ -45,13 +45,9 @@ async def check_auth(req):
operation = "ValidateToken" operation = "ValidateToken"
variables = {"params": {"token_type": "access_token", "token": token}} variables = {"params": {"token_type": "access_token", "token": token}}
# Добавляем CORS заголовки # Только необходимые заголовки для GraphQL запроса
headers = { headers = {
'Content-Type': 'application/json', 'Content-Type': 'application/json'
'Access-Control-Allow-Origin': '*',
'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
'Access-Control-Allow-Headers': ', '.join(ALLOWED_HEADERS),
'Access-Control-Allow-Credentials': 'true'
} }
gql = { gql = {
@ -114,7 +110,7 @@ def login_required(f):
""" """
Декоратор для проверки авторизации пользователя. Декоратор для проверки авторизации пользователя.
Этот декоратор проверяет, авторизован ли пользователь, и добавляет Этот декоратор проверяет, авторизован ли пользователь, <EFBFBD><EFBFBD> добавляет
информацию о пользователе в контекст функции. информацию о пользователе в контекст функции.
Параметры: Параметры: