Fixing some CRSF stuff

Author: user-of-github

core/settings.py

@@ -1,7 +1,6 @@
 import json
 import os
 from pathlib import Path
-import rest_framework
 
 CONFIGURATION = json.load(open((Path(__file__).parent / '../config.json').resolve()))
 
@@ -13,7 +12,21 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = CONFIGURATION['DEBUG']  # int(os.environ.get('DEBUG', default=False))
 
-ALLOWED_HOSTS = ['*']
+CORS_ALLOW_ALL_ORIGINS = True  # If this is used then `CORS_ALLOWED_ORIGINS` will not have any effect
+CORS_ALLOW_CREDENTIALS = True
+
+CSRF_TRUSTED_ORIGINS = [
+    'https://*.yandex-academy.ru',
+    'http://localhost',
+    'http://localhost:8000',
+    'http://localhost:80',
+    'http://0.0.0.0',
+    'http://0.0.0.0:80',
+    'http://0.0.0.0:8000',
+    'http://127.0.0.1:8000',
+    'http://127.0.0.1',
+    'http://127.0.0.1:80'
+]
 
 # Application definition
 
@@ -25,7 +38,8 @@
     'django.contrib.messages',
     'django.contrib.staticfiles',
     'rest_framework',
-    'shop'
+    'shop',
+    'corsheaders'
 ]
 
 MIDDLEWARE = [
@@ -36,6 +50,8 @@
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
+    'django.middleware.common.CommonMiddleware'
 ]
 
 ROOT_URLCONF = 'core.urls'

unit_test.py

@@ -6,7 +6,7 @@
 import urllib.parse
 import urllib.request
 
-API_BASEURL = 'http://localhost:80'
+API_BASEURL = 'https://responses-1920.usr.yandex-academy.ru'
 
 
 ROOT_ID = "069cb8d7-bbdd-47d3-ad8f-82ef4c269df1"
@@ -239,8 +239,8 @@ def test_nodes():
 
 def test_sales():
     status, response = request(f'/sales?date=2022-02-04T00:00:00.000Z')
-    print(response)
-    print(status)
+    #print(response)
+    #print(status)
     assert status == 200, f"Expected HTTP status code 200, got {status}"
     print("Test sales passed.")
 
@@ -270,7 +270,7 @@ def test_delete():
 def test_all():
     test_import()
     test_nodes()
-    #test_sales() # I have sales, but sometimes DEPLOYED app responses with 500
+    test_sales() # I have sales, but sometimes DEPLOYED app responses with 500
     #test_stats()
     test_delete()