Подключил CORS, добавил документацию

config/settings.py

@@ -44,6 +44,8 @@
     'rest_framework',
     'django_extensions',
     'django_filters',
+    'drf_yasg',
+    'corsheaders',
 
     'custom_user.apps.CustomUserConfig',
     'products.apps.ProductsConfig',
@@ -91,6 +93,7 @@
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -151,6 +154,19 @@
 ]
 
 
+# CORS integration
+# https://pypi.org/project/django-cors-headers/#description (CSRF Integration)
+
+CORS_ALLOWED_ORIGINS = [
+    "https://read-only.example.com",
+    "https://read-and-write.example.com",
+]
+
+CSRF_TRUSTED_ORIGINS = [
+    "https://read-and-write.example.com",
+]
+
+
 # Internationalization
 # https://docs.djangoproject.com/en/4.2/topics/i18n/
 

config/urls.py

@@ -16,9 +16,26 @@
 """
 from django.contrib import admin
 from django.urls import path, include
+from drf_yasg import openapi
+from drf_yasg.views import get_schema_view
+from rest_framework import permissions
 from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView
 
 
+schema_view = get_schema_view(
+   openapi.Info(
+      title="Marketplace API template",
+      default_version='v1',
+      description="Here you can find all the information about requests and check them",
+      terms_of_service="https://www.google.com/policies/terms/",
+      contact=openapi.Contact(url="https://github.com/Abramov0Alexandr"),
+      license=openapi.License(name="BSD License"),
+   ),
+   public=True,
+   permission_classes=(permissions.AllowAny,),
+)
+
+
 urlpatterns = [
     path('admin/', admin.site.urls),
     path('users/', include('custom_user.urls', namespace='custom_user')),
@@ -27,4 +44,8 @@
     # authorization urls
     path('token/', TokenObtainPairView.as_view(), name='token_obtain_pair'),
     path('token/refresh/', TokenRefreshView.as_view(), name='token_refresh'),
+
+    # documentation
+    path('swagger/', schema_view.with_ui('swagger', cache_timeout=0), name='schema-swagger-ui'),
+    path('redoc/', schema_view.with_ui('redoc', cache_timeout=0), name='schema-redoc'),
 ]

pyproject.toml

@@ -24,6 +24,7 @@ django-filter = "^23.3"
 pillow = "^10.0.1"
 pyparsing = "^3.1.1"
 pydot = "^1.4.2"
+django-cors-headers = "^4.2.0"
 
 
 [build-system]