django_cors_headers_middleware_and_allowed_origins_config.py

1# settings.py
2
3INSTALLED_APPS = [
4    ...,
5    "corsheaders",
6    ...,
7]
8
9MIDDLEWARE = [
10    ...,
11    "corsheaders.middleware.CorsMiddleware",
12    "django.middleware.common.CommonMiddleware",
13    ...,
14]
15
16# Configure the origins that are allowed to make cross-site HTTP requests.
17# You can use CORS_ALLOWED_ORIGINS to list specific domains:
18CORS_ALLOWED_ORIGINS = [
19    "https://example.com",
20    "https://sub.example.com",
21    "http://localhost:8080",
22    "http://127.0.0.1:9000",
23]
24
25# Alternatively, to allow all origins (not recommended for production):
26# CORS_ALLOW_ALL_ORIGINS = True