解决flask-cors只允许特定域名跨域

1.Flask中解决跨域问题

• 方法1：添加 supports_credentials=True 参数

from flask_cors import CORS

app = Flask(__name__)
CORS(app, supports_credentials=True)

• 方法2：添加 resources 参数

from flask import Flask, jsonify
from flask_cors import CORS


app = Flask(__name__)
CORS(app, resources=r'/*')	# 注册CORS, "/*" 允许访问所有api

• 方法3：添加 resources 参数

from flask import Flask, session
from flask_cors import CORS

app = Flask(__name__)
CORS(app,  resources={r"/*": {"origins": "*"}})   # 允许所有域名跨域

@app.route("/")
def helloWorld():
  return "Hello, %s" % session['username']

2.只允许特定域名跨域

from flask import Flask, session
from flask_cors import CORS

app = Flask(__name__)
cors = CORS(app, resources={r"/.*": {"origins": "http://192.168.1.1:8888"}})   # 只允许特定域名跨域


@app.route("/")
def helloWorld():
  return "Hello, %s" % session['username']

3.允许特定几个域名跨域

from flask import Flask, session
from flask_cors import CORS

app = Flask(__name__)
cors = CORS(app, resources={r"/.*": {"origins": ["http://192.168.1.1:8888","http://www.bai.com"]}})   # 只允许特定几个域名跨域


@app.route("/")
def helloWorld():
  return "Hello, %s" % session['username']

4.根据正则表达式指定对应域名跨域

app = Flask(__name__)
CORS(app, resources={r"/.*": {"origins": "*.fangdd.net"}})


@app.route("/")
def helloWorld():
  return "Hello, %s" % session['username']