From 3df8f65db60b83778b46384e1bc26c2c0ef2067f Mon Sep 17 00:00:00 2001
From: simon <simobilleter@gmail.com>
Date: Fri, 14 Jan 2022 14:46:00 +0700
Subject: [PATCH] implement cors for browser extension

---
 tubearchivist/api/views.py       |  1 +
 tubearchivist/config/settings.py | 11 +++++++++++
 tubearchivist/requirements.txt   |  1 +
 3 files changed, 13 insertions(+)

diff --git a/tubearchivist/api/views.py b/tubearchivist/api/views.py
index ccbc22f..745a5eb 100644
--- a/tubearchivist/api/views.py
+++ b/tubearchivist/api/views.py
@@ -178,6 +178,7 @@ class DownloadApiListView(ApiBaseView):
     @staticmethod
     def post(request):
         """add list of videos to download queue"""
+        print(f"request meta data: {request.META}")
         data = request.data
         try:
             to_add = data["data"]
diff --git a/tubearchivist/config/settings.py b/tubearchivist/config/settings.py
index cb12ad6..9999b7a 100644
--- a/tubearchivist/config/settings.py
+++ b/tubearchivist/config/settings.py
@@ -14,6 +14,7 @@ import hashlib
 from os import environ, path
 from pathlib import Path
 
+from corsheaders.defaults import default_headers
 from home.src.config import AppConfig
 
 # Build paths inside the project like this: BASE_DIR / 'subdir'.
@@ -41,6 +42,7 @@ INSTALLED_APPS = [
     "django.contrib.contenttypes",
     "django.contrib.sessions",
     "django.contrib.messages",
+    "corsheaders",
     "whitenoise.runserver_nostatic",
     "django.contrib.staticfiles",
     "django.contrib.humanize",
@@ -52,6 +54,7 @@ INSTALLED_APPS = [
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
+    "corsheaders.middleware.CorsMiddleware",
     "whitenoise.middleware.WhiteNoiseMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
@@ -140,3 +143,11 @@ DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
 
 LOGIN_URL = "/login/"
 LOGOUT_REDIRECT_URL = "/login/"
+
+# Cors needed for browser extension
+# background.js makes the request so HTTP_ORIGIN will be from extension
+CORS_ALLOWED_ORIGIN_REGEXES = [r"moz-extension://*"]
+
+CORS_ALLOW_HEADERS = list(default_headers) + [
+    "mode",
+]
diff --git a/tubearchivist/requirements.txt b/tubearchivist/requirements.txt
index 3ebbf26..2bf1310 100644
--- a/tubearchivist/requirements.txt
+++ b/tubearchivist/requirements.txt
@@ -1,5 +1,6 @@
 beautifulsoup4==4.10.0
 celery==5.2.3
+django-cors-headers==3.11.0
 Django==4.0.1
 djangorestframework==3.13.1
 Pillow==9.0.0