vf/vf_react
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update watchlist

Browse Source
This commit is contained in:
zzlgreat
2025-12-15 18:24:34 +08:00
parent 389a537cef
commit affff859b0
1 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
app.py
View File

@@ -486,10 +486,11 @@ app.config['MAIL_DEFAULT_SENDER'] = MAIL_DEFAULT_SENDER
# 允许前端跨域访问 - 修复CORS配置
try:
CORS(app,
origins=["http://localhost:3000", "http://127.0.0.1:3000", "http://localhost:5173", "https://valuefrontier.cn",
"http://valuefrontier.cn"], # 明确指定允许的源
origins=["http://localhost:3000", "http://127.0.0.1:3000", "http://localhost:5173",
"https://valuefrontier.cn", "http://valuefrontier.cn",
"https://www.valuefrontier.cn", "http://www.valuefrontier.cn"], # 明确指定允许的源
methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
allow_headers=["Content-Type", "Authorization", "X-Requested-With"],
allow_headers=["Content-Type", "Authorization", "X-Requested-With", "Cache-Control"],
supports_credentials=True, # 允许携带凭据
expose_headers=["Content-Type", "Authorization"])
except ImportError:
@@ -5261,12 +5262,13 @@ def after_request(response):
"""处理所有响应，添加CORS头部和安全头部"""
origin = request.headers.get('Origin')
allowed_origins = ['http://localhost:3000', 'http://127.0.0.1:3000', 'http://localhost:5173',
'https://valuefrontier.cn', 'http://valuefrontier.cn']
'https://valuefrontier.cn', 'http://valuefrontier.cn',
'https://www.valuefrontier.cn', 'http://www.valuefrontier.cn']
if origin in allowed_origins:
response.headers['Access-Control-Allow-Origin'] = origin
response.headers['Access-Control-Allow-Credentials'] = 'true'
response.headers['Access-Control-Allow-Headers'] = 'Content-Type,Authorization,X-Requested-With'
response.headers['Access-Control-Allow-Headers'] = 'Content-Type,Authorization,X-Requested-With,Cache-Control'
response.headers['Access-Control-Allow-Methods'] = 'GET,PUT,POST,DELETE,OPTIONS'
response.headers['Access-Control-Expose-Headers'] = 'Content-Type,Authorization'
@@ -5281,14 +5283,15 @@ def add_cors_headers(response):
"""添加CORS头（保留原有函数以兼容）"""
origin = request.headers.get('Origin')
allowed_origins = ['http://localhost:3000', 'http://127.0.0.1:3000', 'http://localhost:5173',
'https://valuefrontier.cn', 'http://valuefrontier.cn']
'https://valuefrontier.cn', 'http://valuefrontier.cn',
'https://www.valuefrontier.cn', 'http://www.valuefrontier.cn']
if origin in allowed_origins:
response.headers['Access-Control-Allow-Origin'] = origin
else:
response.headers['Access-Control-Allow-Origin'] = 'http://localhost:3000'
response.headers['Access-Control-Allow-Headers'] = 'Content-Type,Authorization,X-Requested-With'
response.headers['Access-Control-Allow-Headers'] = 'Content-Type,Authorization,X-Requested-With,Cache-Control'
response.headers['Access-Control-Allow-Methods'] = 'GET,PUT,POST,DELETE,OPTIONS'
response.headers['Access-Control-Allow-Credentials'] = 'true'
return response