python - 即使使用 Auth Pre-Flight 的头，Python Falcon 的 CORS 失败

Question

在 Angular2 http.get(url, options) 中使用 OPTIONS 动词 时收到这些错误，即使在 Falcon Rest API 中设置了适当的 CORS header 也是如此。

XMLHttpRequest cannot load http://localhost:8000/names. Request header field Authorization is not allowed by Access-Control-Allow-Headers in preflight response.

resp.set_header("Access-Control-Allow-Origin", "*")
        resp.set_header("Access-Control-Allow-Credentials", "true")
        resp.set_header("Access-Control-Allow-Methods", "GET,HEAD,OPTIONS,POST,PUT")
        resp.set_header("Access-Control-Allow-Headers",
                       "Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers")

对于非 OPTIONS/正常的 http.get() 请求，这工作正常。

Answer 1

使用 falcon_cors 解决了这个问题，特别是通过设置 allow_all_methods=True

pip install falcon-cors

from falcon_cors import CORS

cors = CORS(allow_origins_list=['http://localhost:3000'],
            allow_all_headers=True,
            allow_all_methods=True)

api = falcon.API(middleware=[cors.middleware])