debug cors

.github/workflows/code.yml

@@ -4,6 +4,16 @@ on:
     branches:
       - master
       - dev
+      - debug-*
+    paths:
+      - "apps/**"
+      - "configs/**"
+      - "templates/**"
+  pull_request:
+    branches:
+      - master
+      - dev
+      - debug-*
     paths:
       - "apps/**"
       - "configs/**"
@@ -14,6 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@master
+
       - name: build code image
         uses: elgohr/Publish-Docker-Github-Action@master
         with:
@@ -22,8 +33,10 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
           tags: "latest,code"
           dockerfile: deploy/Dockerfile.CODE
+
       - name: build debug code image
         uses: elgohr/Publish-Docker-Github-Action@master
+        if: startsWith(github.ref, 'refs/heads/debug-')
         with:
           name: ehco1996/django-sspanel
           username: ${{ secrets.DOCKER_USERNAME }}

configs/default/common.py

@@ -22,7 +22,6 @@
     "apps.openapi",
 ]
 
-CORS_ALLOW_ALL_ORIGINS = True
 
 MIDDLEWARE = [
     "django_prometheus.middleware.PrometheusBeforeMiddleware",

configs/default/sites.py

@@ -11,6 +11,8 @@
 
 # 网站域名设置（请正确填写，不然订阅功能会失效：
 HOST = os.getenv("HOST", "http://127.0.0.1:8000")
+CORS_ALLOW_ALL_ORIGINS = True
+CSRF_TRUSTED_ORIGINS = [HOST]
 
 # 网站密钥
 SECRET_KEY = os.getenv("SECRET_KEY", "aasdasdas")

configs/development.py

@@ -1,5 +1,3 @@
-import os
-
 from configs.default import *  # noqa
 
 # NOTE for django debug toolbar