feat(api): add CORS headers to allow external usage, see #87

api/api/settings.py

@@ -41,9 +41,11 @@ INSTALLED_APPS = (
     'rest_framework',
     'djoser',
     'desecapi',
+    'corsheaders',
 )
 
 MIDDLEWARE = (
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
 )
@@ -107,6 +109,10 @@ DJOSER = {
     'TOKEN_MODEL': 'desecapi.models.Token',
 }
 
+# CORS
+# No need to add Authorization to CORS_ALLOW_HEADERS (included by default)
+CORS_ORIGIN_ALLOW_ALL=True
+
 TEMPLATES = [
     {
         'BACKEND': 'django.template.backends.django.DjangoTemplates',

api/requirements.txt

@@ -1,5 +1,6 @@
 coverage~=4.5.3
 Django~=2.2.0
+django-cors-headers~=3.0.2
 django-nocaptcha-recaptcha==0.0.20  # updated manually
 djangorestframework~=3.9.3
 djangorestframework-bulk~=0.2.0