A Sanic extension adding a decorator for CORS support. Based on flask-cors by Cory Dolphin.
Project description
A Sanic extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible. Based on flask-cors by Cory Dolphin.
This package has a simple philosophy, when you want to enable CORS, you wish to enable it for all use cases on a domain. This means no mucking around with different allowed headers, methods, etc. By default, submission of cookies across domains is disabled due to the security implications, please see the documentation for how to enable credential’ed requests, and please make sure you add some sort of CSRF protection before doing so!
Installation
Install the extension with using pip, or easy_install.
$ pip install -U sanic-corsUsage
This package exposes a Sanic extension which by default enables CORS support on all routes, for all origins and methods. It allows parameterization of all CORS headers on a per-resource level. The package also contains a decorator, for those who prefer this approach.
Simple Usage
In the simplest case, initialize the Sanic-Cors extension with default arguments in order to allow CORS for all domains on all routes.
from sanic import Sanic
from sanic.response import text
from sanic_cors import CORS, cross_origin
app = Sanic(__name__)
CORS(app)
@app.route("/", methods=['GET', 'OPTIONS'])
def hello_world(request):
return text("Hello, cross-origin-world!")Resource specific CORS
Alternatively, you can specify CORS options on a resource and origin level of granularity by passing a dictionary as the resources option, mapping paths to a set of options.
app = Sanic(__name__)
cors = CORS(app, resources={r"/api/*": {"origins": "*"}})
@app.route("/api/v1/users", methods=['GET', 'OPTIONS'])
def list_users(request):
return text("user example")Route specific CORS via decorator
This extension also exposes a simple decorator to decorate sanic routes with. Simply add @cross_origin(app) below a call to Sanic’s @app.route(..) to allow CORS on a given route.
@app.route("/", methods=['GET', 'OPTIONS'])
@cross_origin(app)
def hello_world(request):
return text("Hello, cross-origin-world!")SPF Usage
Sanic-CORS uses Sanic-Plugins-Framework behind the scenes. That means you can use SPF to load the plugin for you if you are orchestrating and application with multiple SPF plugins.
from sanic import Sanic
from sanic.response import text
from spf import SanicPluginsFramework
from sanic_cors.extension import cors
app = Sanic(__name__)
spf = SanicPluginsFramework(app)
spf.register_plugin(cors, automatic_options=True)
@app.route("/", methods=['GET', 'OPTIONS'])
def hello_world(request):
return text("Hello, cross-origin-world!")Documentation
For a full list of options, please see the flask-cors documentation.
Preflight Requests
CORS requests have to send pre-flight requests via the options method, Sanic by default only allows the GET method, in order to service your CORS requests you must specify OPTIONS in the methods argument to your routes decorator.
Alternately, you can use the automatic_options configuration parameter to handle the OPTIONS response automatically for you.
CORS(app, automatic_options=True)
@app.delete('/api/auth')
@auth.login_required
async def auth_logout(request):
auth.logout_user(request)
return json(None, status=OK)or with the app config key:
app = Sanic(__name__)
app.config['CORS_AUTOMATIC_OPTIONS'] = True
CORS(app)
@app.delete('/api/auth')
@auth.login_required
async def auth_logout(request):
auth.logout_user(request)
return json(None, status=OK)or directly on the route with the cross_origin decorator:
@app.route('/api/auth', methods={'DELETE','OPTIONS'})
@auth.login_required
@cross_origin(app, automatic_options=True)
async def auth_logout(request):
auth.logout_user(request)
return json(None, status=OK)Note: For the third example, you must use @route(), rather than @delete() because you need to enable both DELETE and OPTIONS to work on that route, even though the decorator is handling the OPTIONS response.
Troubleshooting
If things aren’t working as you expect, enable logging to help understand what is going on under the hood, and why.
logging.getLogger('sanic_cors').level = logging.DEBUGTests
A simple set of tests is included in test/. To run, install nose, and simply invoke nosetests or python setup.py test to exercise the tests.
Contributing
Questions, comments or improvements? Please create an issue on Github. I do my best to include every contribution proposed in any way that I can.
Credits
This Sanic extension is based upon the Decorator for the HTTP Access Control written by Armin Ronacher.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
File details
Details for the file Sanic-Cors-0.9.9.post2.tar.gz.
File metadata
- Download URL: Sanic-Cors-0.9.9.post2.tar.gz
- Upload date:
- Size: 32.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/1.15.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/41.2.0 requests-toolbelt/0.9.1 tqdm/4.36.0 CPython/3.5.6
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 76459e0c69f699aa258466d1b02628a44564b81102853db1a673c231fa389e15 |
|
| MD5 | 50b8b1c45fafd9190b977125ace6601c |
|
| BLAKE2b-256 | 9ecd9ceca35e8a25d2187a7551142cd184517a33ee481a53468075e16ec5d856 |
Provenance
File details
Details for the file Sanic_Cors-0.9.9.post2-py2.py3-none-any.whl.
File metadata
- Download URL: Sanic_Cors-0.9.9.post2-py2.py3-none-any.whl
- Upload date:
- Size: 16.7 kB
- Tags: Python 2, Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/1.15.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/41.2.0 requests-toolbelt/0.9.1 tqdm/4.36.0 CPython/3.5.6
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | 3fa548bbbab6d2046d68eca95e62ce597885248e6885e1b8cea82eb56ef43b0e |
|
| MD5 | 14480bcf718a1e294954630a916ab2cd |
|
| BLAKE2b-256 | 8c9433a5c5060a668ff782d3edc937515c96f4d91ee6126cc1189dab95d386e5 |
