Cors Not Working: Apache and DRF about django-cors-headers HOT 9 CLOSED

Also i've been trying to log through it and seems that only the request is being processed, but not the response

from django-cors-headers.

Can you perhaps paste some of those logs to help with the debugging?

from django-cors-headers.

@ottoyiu :
I got the settings like @thebenwaters , and I call my login url and pass the username and password arguements. But it returns a 403 "NetworkError: 403 FORBIDDEN - http://sso.acttao.com:8888/zgxcw/login/".

    My login view returns a url at first.   ------return redirect('zg_login')
    After, I return a response and still returns the 403.

    the CORS url must return a response?
    what might causes my issue?
    Thanks a lot.  Need help urgently.

from django-cors-headers.

It does not need to return a response object.
the reason is the shot of settings .
The settings of mine is below.
CORS_ORIGIN_ALLOW_ALL and CORS_ORIGIN_WHITELIST choose one is OK .

CORS_ORIGIN_ALLOW_ALL = True
CORS_ALLOW_CREDENTIALS = False
CORS_ORIGIN_WHITELIST = (
'zgxcw.acttao.com:8002',
'hostname.example.com'
)

At first I lost CORS_ALLOW_CREDENTIALS = True.
and I checked the source code middleware.py
line 57:
response[ACCESS_CONTROL_ALLOW_ORIGIN] = "*" if (
settings.CORS_ORIGIN_ALLOW_ALL and
not settings.CORS_ALLOW_CREDENTIALS) else origin

from django-cors-headers.

403 again!
I didnot find the real reason of 403.

from django-cors-headers.

I hope can help someone with my fail log.
Now, I pass the arguements (username and passwd) from a site to server site,
and called the login function.

But did not login successfully.
I thought might be the cookie did not set successfully.
If anyone has a suggestion is welcome.

from django-cors-headers.

There are a plethora of reasons you might be getting a 403. For me, the fix was to set the withCredentials XHR option to true. A jquery example:

$.ajax({
   url: a_cross_domain_url,
   xhrFields: {
      withCredentials: true
   }
});

from django-cors-headers.

@brad
Thanks for your suggestion.
I did my project whitout cross domain this time .
I would like to check it with my spare time.

from django-cors-headers.

Closing due to inactivity

from django-cors-headers.