feat: 优化cors相关逻辑

czasg · Sep 25, 2024 · 7a59778 · 7a59778
1 parent 1fc84e0
commit 7a59778
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/pywss/handler/cors.py b/pywss/handler/cors.py
@@ -6,7 +6,7 @@
 
 def NewCORSHandler(
         allow_origins: tuple = ("*",),
-        allow_methods: tuple = ("*",),
+        allow_methods: tuple = ("GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"),
         allow_headers: tuple = ("*",),
         allow_credentials: bool = True,
 ):
@@ -16,10 +16,9 @@ def NewCORSHandler(
     allowCredentials = "true" if allow_credentials else "false"
 
     def corsHandler(ctx: pywss.Context):
-        origin = allowOrigins
         headerOrigin = ctx.headers.get(HeaderOrigin, "")
-        if "localhost" in headerOrigin:
-            origin = headerOrigin
+        useLocal = "localhost" in headerOrigin
+        origin = headerOrigin if useLocal else allowOrigins
         ctx.set_header(HeaderAccessControlAllowOrigin, origin)
         ctx.set_header(HeaderAccessControlAllowMethods, allowMethods)
         ctx.set_header(HeaderAccessControlAllowHeaders, allowHeaders)