src/cm/middleware.py
changeset 475 782d40ecf7c3
parent 285 1070d52adc11
equal deleted inserted replaced
474:d3639d79979e 475:782d40ecf7c3
    17                 return HttpResponseRedirect(login_url)
    17                 return HttpResponseRedirect(login_url)
    18             else:
    18             else:
    19                 redirect_url = reverse('unauthorized')
    19                 redirect_url = reverse('unauthorized')
    20                 return HttpResponseRedirect(redirect_url)
    20                 return HttpResponseRedirect(redirect_url)
    21         raise
    21         raise
       
    22 
       
    23     """
       
    24         This middleware allows cross-domain XHR using the html5 postMessage API.
       
    25     """
       
    26     def process_request(self, request):
       
    27 
       
    28         if 'HTTP_ACCESS_CONTROL_REQUEST_METHOD' in request.META:
       
    29             response = http.HttpResponse()
       
    30             response['Access-Control-Allow-Origin']  = '*' 
       
    31             return response
       
    32 
       
    33         return None
       
    34 
       
    35     def process_response(self, request, response):
       
    36         # Avoid unnecessary work
       
    37         if response.has_header('Access-Control-Allow-Origin'):
       
    38             return response
       
    39 
       
    40         response['Access-Control-Allow-Origin']  = '*' 
       
    41 
       
    42         return response