blocks|key|139495|text|您的前端和后端位于不同的端口上，这意味着您的ajax请求受到跨域安全性的影响。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|139496|您需要将后端设置为接受来自不同来源(或只是不同端口号)的请求。|139497|试着阅读CORS，更具体地说是django+cors+headers|offset|length|139498|entityMap|0|LINK|mutability|MUTABLE|url|http://en.wikipedia.org/wiki/Cross-origin_resource_sharing|1|https://github.com/ottoyiu/django-cors-headers^0|0|0|4|4|0|F|J|1|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@$F|U|G|V|1|W]|$F|X|G|Y|1|Z]]|A|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]|P|$5|K|L|M|A|$N|Q]]]]

Your front and back end are on different ports which means your ajax requests are subject to cross origin security.

You need to set up the back end to accept requests from different origins (or just different port numbers).

Try reading up on <a href="http://en.wikipedia.org/wiki/Cross-origin_resource_sharing">CORS</a> and more specifically looking at <a href="https://github.com/ottoyiu/django-cors-headers">django cors headers</a>

blocks|key|139503|text|下面是当我从Restangular发送API请求时，从Django+Rest+Framework得到同样的错误时所做的事情。这样做的目的是将CORS+(Cross-Origin+Resource+Sharing)头添加到Django+Rest框架的响应中。没有CORS标头是导致错误的原因。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|139504|在Django+Project根文件夹(+manage.py文件所在的位置)中，执行以下操作：|139505|pip+install+django-cors-headers|code-block|syntax|javascript|139506|我尝试使用virtualenv，但无法让它工作，所以我在没有切换到virtualenv的情况下安装了它。|139507|安装后，您必须对django+settings.py进行一些编辑|139508|INSTALLED_APPS+=+(
++++...
++++'corsheaders',
++++...
)

MIDDLEWARE_CLASSES+=+(
++++...
++++'corsheaders.middleware.CorsMiddleware',
++++'django.middleware.common.CommonMiddleware',
++++...
)

CORS_ORIGIN_ALLOW_ALL+=+True+++|139509|将上面的设置为true允许接受所有来源。|139510|参考资料：https://github.com/ottoyiu/django-cors-headers|offset|length|139511|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/ottoyiu/django-cors-headers^0|0|0|0|0|0|0|0|5|1A|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|13|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|14|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|15|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|16|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|17|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|18|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|19|8|@]|9|@$S|1A|T|1B|1|1C]]|A|$]]|$1|U|3|-4|5|6|7|1D|8|@]|9|@]|A|$]]]|V|$W|$5|X|Y|Z|A|$10|11]]]]

Here's what I did when I got the same error from Django Rest Framework while sending an API request from Restangular.
What this does is add CORS (Cross-Origin Resource Sharing) headers to responses from Django Rest Framework. Not having CORS headers was the cause of the error.

In the Django Project root folder (where the manage.py file is located), do:

<pre><code>pip install django-cors-headers
</code></pre>

I tried it using virtualenv but was not able to get it to work, so I installed it without switching to virtualenv and got it installed.

After installing it, you have to make some edits to your django settings.py

<pre><code>INSTALLED_APPS = (
 ...
 'corsheaders',
 ...
)

MIDDLEWARE_CLASSES = (
 ...
 'corsheaders.middleware.CorsMiddleware',
 'django.middleware.common.CommonMiddleware',
 ...
)

CORS_ORIGIN_ALLOW_ALL = True 
</code></pre>

Setting above to true allows all origins to be accepted.

References: <a href="https://github.com/ottoyiu/django-cors-headers" rel="noreferrer">https://github.com/ottoyiu/django-cors-headers</a>

blocks|key|4646169|text|在我的例子中，我只是忘了在REST+API+URL的末尾添加一个尾随斜杠。也就是说，我有这个：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4646170|http://127.0.0.1:8000/rest-auth/login|code-block|syntax|javascript|4646171|而不是这样：|4646172|http://127.0.0.1:8000/rest-auth/login/|4646173|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

In my case, I had simply forgotten to add a trailing slash at the end of the REST API URL. ie,
I had this:

<pre><code>http://127.0.0.1:8000/rest-auth/login
</code></pre>

Instead of this:

<pre><code>http://127.0.0.1:8000/rest-auth/login/
</code></pre>

blocks|key|4646205|text|如果django-cors-headers不能解决问题，请尝试手动添加Access-Control-Allow-Origin，如下所示：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4646206|@api_view(['GET'])
def+swanger(request):
++resutl+=+{'a':+1}
++resp+=+JsonResponse(resutl)
++resp['Access-Control-Allow-Origin']+=+'*'
++return+resp++|code-block|syntax|javascript|4646207|entityMap^0|2|J|Z|R|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

If <code>django-cors-headers</code> not resolved the problem try manual add <code>Access-Control-Allow-Origin</code> like this:

<pre><code>@api_view(['GET'])
def swanger(request):
 resutl = {'a': 1}
 resp = JsonResponse(resutl)
 resp['Access-Control-Allow-Origin'] = '*'
 return resp 
</code></pre>

blocks|key|4646240|text|在我的例子中，它是localhost:8000，而预期是127.0.0.1+...在我的浏览器中将localhost更改为127.0.0.1就成功了|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4646241|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

in my case it was localhost:8000 while 127.0.0.1 was expected... changing localhost to 127.0.0.1 in my browser did the trick

blocks|key|139600|text|我使用的是python+2.7，由于某些原因，我无法将python版本更改为版本3，我花了3个小时才找到一个解决方案，即：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|139601|response+=++HttpResponse(json.dumps(result),+content_type="application/json")
response["Access-Control-Allow-Origin"]+=+'*'
response["Access-Control-Allow-Methods"]+=+'GET,PUT,+OPTIONS'
response["Access-Control-Max-Age"]+=+'1000'
response["Access-Control-Allow-Headers"]+=+'X-Requested-With,+Content-Type'
return+response|code-block|syntax|javascript|139602|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

i was using python 2.7 and due to some reasons i cannot change the python version
to version 3 and it took me 3 hours to find a solution which is :
<pre><code>response = HttpResponse(json.dumps(result), content_type=&quot;application/json&quot;)
response[&quot;Access-Control-Allow-Origin&quot;] = '*'
response[&quot;Access-Control-Allow-Methods&quot;] = 'GET,PUT, OPTIONS'
response[&quot;Access-Control-Max-Age&quot;] = '1000'
response[&quot;Access-Control-Allow-Headers&quot;] = 'X-Requested-With, Content-Type'
return response
</code></pre>

blocks|key|4646309|text|将redirect:+'follow'添加到客户端的标头中|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4646310|var+requestOptions+=+{
++method:+'POST',
++headers:+myHeaders,
++body:+raw,
++redirect:+'follow'
};

fetch("http://www.example.com/auth/token/login/",+requestOptions)
++.then(response+=>+response.text())
++.then(result+=>+console.log(result))
++.catch(error+=>+console.log('error',+error));|code-block|syntax|javascript|4646311|entityMap^0|1|I|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

Add <code>redirect: 'follow'</code> to the headers on the client
<pre><code>var requestOptions = {
 method: 'POST',
 headers: myHeaders,
 body: raw,
 redirect: 'follow'
};

fetch(&quot;http://www.example.com/auth/token/login/&quot;, requestOptions)
 .then(response =&gt; response.text())
 .then(result =&gt; console.log(result))
 .catch(error =&gt; console.log('error', error));
</code></pre>

blocks|key|139661|text|我尝试了上面的答案，但都不起作用。当我再次阅读终端提示时，我发现一个警告:+MIDDLEWARE_CLASSES与调试环境不兼容，请使用MIDDLEWARE。我找到了中间件设置，并将'corsheaders.middleware.CorsMiddleware',+'django.middleware.common.CommonMiddleware',添加到其中，它就可以工作了。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|139662|叹息|139663|entityMap^0|1W|A|2J|2D|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|P|8|@]|D|@]|E|$]]]|I|$]]

I try the above answers with favs but all not work. When I read again the terminal prompts and I found a warning: MIDDLEWARE_CLASSES is not compatible to the debug environment, use <code>MIDDLEWARE</code>. I found the MIDDLEWARE settings and add <code>'corsheaders.middleware.CorsMiddleware', 'django.middleware.common.CommonMiddleware',</code> to it and it worked.
Sigh

I am newbie to django and using it as back end for an application that creates users. In front end the code for posting the user name is :

<pre><code>var xobj = new XMLHttpRequest();
 xobj.overrideMimeType("application/json");
 xobj.open('POST', "http://www.local:8000/create_user/", true);
 xobj.setRequestHeader("Access-Control-Allow-Origin", "*");
 xobj.onreadystatechange = function () {
 if (xobj.readyState == 4 &amp;&amp; xobj.status == "200") {
 console.log(xobj.responseText);
 }
 }
 xobj.send(json); 
</code></pre>

On back end the function associated with url handles json but i am getting the error
"No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin '<a href="http://www.local:54521">http://www.local:54521</a>' is therefore not allowed access".
What is the solution for this problem?
Also I have followed the steps from "<a href="https://gist.github.com/strogonoff/1369619">https://gist.github.com/strogonoff/1369619</a>", but problem persists.

"No 'Access-Control-Allow-Origin' header is present on the requested resource" in django

中间件

Django

我是django的新手，并将其用作创建用户的应用程序的后端。在前端，发布用户名的代码是：var xobj = new XMLHttpRequest();              xobj.overrideMimeType("application/json");              xobj.open('POS...

问django中“请求的资源上没有'Access-Control-Allow-Origin‘标头”
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问django中“请求的资源上没有'Access-Control-Allow-Origin‘标头”EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问django中“请求的资源上没有'Access-Control-Allow-Origin‘标头”
EN