Merge branch 'Roussille/bda' into 'master'

autorisation des requêtes cross-domain

See merge request cof-geek/gestioCOF!253

cof/settings/common.py

@@ -104,9 +104,11 @@ INSTALLED_APPS = [
     'taggit',
     'kfet.auth',
     'kfet.cms',
+    'corsheaders',
 ]
 
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
@@ -208,6 +210,13 @@ AUTHENTICATION_BACKENDS = (
 
 RECAPTCHA_USE_SSL = True
 
+CORS_ORIGIN_WHITELIST = (
+    'bda.ens.fr',
+    'www.bda.ens.fr'
+    'cof.ens.fr',
+    'www.cof.ens.fr',
+)
+
 # Cache settings
 
 CACHES = {

requirements.txt

@@ -24,6 +24,7 @@ channels==1.1.5
 python-dateutil
 wagtail==1.10.*
 wagtailmenus==2.2.*
+django-cors-headers==2.2.0
 
 # Production tools
 wheel