处理交叉XHR请求的Django中间件不起作用

Question

我为Django 2.1编写了一个中间件来处理跨域XHR请求，但是它不工作，事实上，它甚至没有被请求或响应调用，也不打印任何内容。你知道吗

设置.py

XS_SHARING_ALLOWED_METHODS = ['POST', 'GET', 'OPTIONS', 'PUT', 'DELETE']
XS_SHARING_ALLOWED_ORIGINS = "*"

MIDDLEWARE_CLASSES = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'app_name.middleware.crossdomainxhr.XsSharing',
]

跨域xhr.py

import logging
from django import http
from django.conf import settings

try:
    XS_SHARING_ALLOWED_ORIGINS = settings.XS_SHARING_ALLOWED_ORIGINS
except AttributeError:
    XS_SHARING_ALLOWED_ORIGINS = '*'

try:
    XS_SHARING_ALLOWED_METHODS = settings.XS_SHARING_ALLOWED_METHODS
except AttributeError:
    XS_SHARING_ALLOWED_METHODS = ['POST', 'GET', 'OPTIONS', 'PUT', 'DELETE']

try:
    XS_SHARING_ALLOWED_HEADERS = settings.XS_SHARING_ALLOWED_HEADERS
except:
    XS_SHARING_ALLOWED_HEADERS = ['Content-Type', '*']

try:
    XS_SHARING_ALLOWED_CREDENTIALS = 
        settings.XS_SHARING_ALLOWED_CREDENTIALS
except AttributeError:
    XS_SHARING_ALLOWED_CREDENTIALS = 'true'


class XsSharing:
    """
    This middleware allows cross-domain XHR using the html5 postMessage 
    API.
    """
    **EDIT**
    def __init__(self, get_response):
        print('Hi, I am middleware')
        self.get_response = get_response

    def __call__(self, request):
        print('hello')
        self.process_request(request)
        response = self.get_response(request)
        response = self.process_response(request, response)
        return response
    def process_request(self, request):
        print('calling request section')
        if 'HTTP_ACCESS_CONTROL_REQUEST_METHOD' in request.META:
            response = http.HttpResponse()
            response['Access-Control-Allow-Origin'] = 
            XS_SHARING_ALLOWED_ORIGINS
                response['Access-Control-Allow-Methods'] = 
                    ",".join(XS_SHARING_ALLOWED_METHODS)
                response['Access-Control-Allow-Headers'] = 
                    ",".join(XS_SHARING_ALLOWED_HEADERS)
                response['Access-Control-Allow-Credentials'] = 
                    XS_SHARING_ALLOWED_CREDENTIALS
        return response

    return None

    def process_response(self, request, response):
        print('calling response')
        response['Access-Control-Allow-Origin'] = 
            XS_SHARING_ALLOWED_ORIGINS
        response['Access-Control-Allow-Methods'] = 
            ",".join(XS_SHARING_ALLOWED_METHODS)
        response['Access-Control-Allow-Headers'] = 
            ",".join(XS_SHARING_ALLOWED_HEADERS)
        response['Access-Control-Allow-Credentials'] = 
            XS_SHARING_ALLOWED_CREDENTIALS

    return response

问题是，如果我从另一个Django应用程序调用我的应用程序的某个URL，那么请求就会被阻止，有人知道我在这方面哪里出错了吗？你知道吗

Answer 1

Django 1.10中不推荐使用中间件类，Django 2.0中删除了中间件类。您应该使用中间件设置和new-style middleware class。你知道吗