wonderbeyond
7/13/2015 - 7:13 AM

tornado cors support

tornado cors support

class APIHandler(tornado.web.RequestHandler):
    # ...
    def set_default_headers(self):
        origin = self.request.headers.get('Origin')
        if not origin:
            return

        allowed_pat = r'https?://(([\w]+\.)?domain1\.com|([\w]+\.)?domain2\.cn|[\d\.]+)$'
        if re.match(allowed_pat, origin):
            self.set_header('Access-Control-Allow-Origin', origin)
    #...