我有一个Flask Restful API配置了一些CORS选项:api = Api()
api.decorators=[cors.crossdomain(origin='*', headers=['accept', 'Content-Type'])]
...
api.init_app(app)
我的API接受POST请求,如果请求中的数据无效,则可能会失败:
^{pr2}$
当我向API发出成功的POST请求时,我可以看到CORS选项设置正确:...
* upload completely sent off: 81 out of 81 bytes
* HTTP 1.0, assume close after body
< HTTP/1.0 200 OK
< Content-Type: application/json
< Content-Length: 205
< Access-Control-Allow-Origin: *
< Access-Control-Allow-Methods: HEAD, GET, POST, OPTIONS
< Access-Control-Max-Age: 21600
< Access-Control-Allow-Headers: ACCEPT, CONTENT-TYPE
< Server: Werkzeug/0.9.4 Python/2.7.6
但是,如果类中的post调用通过abort方法退出(故意向请求发送错误数据),那么响应中的Access-Control-*字段都将丢失:* upload completely sent off: 75 out of 75 bytes
* HTTP 1.0, assume close after body
< HTTP/1.0 500 INTERNAL SERVER ERROR
< Content-Type: application/json
< Content-Length: 51
< Server: Werkzeug/0.9.4 Python/2.7.6
是否可以使abort方法更好地使用CORS规则,还是应该创建自己的完整响应并避免使用abort函数?在