我正在构建一个web应用程序，其中前端使用Flutter，后端使用Python.
Access to XMLHttpRequest at 'http://127.0.0.1:8080/signal' from origin 'http://localhost:57765' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.
下面是我用来发送GET和POST请求的Flutter 功能:
Future<dynamic> sendResponse() async {
final url = 'http://127.0.0.1:8080/signal';
var data = {
"signal": '8',
};
var header = {
'Access-Control-Allow-Origin': '*',
"Accept": "application/x-www-form-urlencoded, '*'"
};
http.Response response = await http.post(Uri.parse(url), body: data, headers: header);//http.post(Uri.parse(url), body: data, headers: header);//http.get(Uri.parse(url));
if (response.statusCode == 200) {
print(json.decode(response.body));
return jsonDecode(response.body);
//print(json.decode(credentials.body));
} else {
print(response.statusCode);
throw Exception('Failed to load Entry');
}
// var ResponseFromPython = await response.body;//jsonDecode(credentials.body);
// return ResponseFromPython;
}
下面是我使用Flask的Python后端代码:
from flask import Flask,jsonify, request, make_response
import json
from flask_cors import CORS, cross_origin
#declared an empty variable for reassignment
response = ''
app = Flask(__name__)
#CORS(app, resources={r"/signal": {"origins": "*, http://localhost:59001"}})
#http://localhost:52857
#CORS(app, origins=['*'])
app.config['CORS_HEADERS'] = ['Content-Type','Authorization']
@app.route("/")
def index():
return "Congratulations, it worked"
@app.route("/signal", methods = ['POST', 'GET']) #,
@cross_origin(origins='http://localhost:57765',headers=['Content-Type','Authorization',
'application/x-www-form-urlencoded','*'], upports_credentials=True)# allow all origins all
methods.
def multbytwo():
"""multiple signal by 2 just to test."""
global response
if (request.method=='POST'):
# request.headers.add("Access-Control-Allow-Origin", "*")
request_data = request.data #getting the response data
request_data = json.loads(request_data.decode('utf-8')) #converting it from json to key
value pair
comingSignal = request_data['signal']
response = make_response(comingSignal, 201)#jsonify(comingSignal*2)
response.headers.add('Access-Control-Allow-Origin', '*')
response.headers.add('Access-Control-Allow-Methods", "DELETE, POST, GET, OPTIONS')
response.headers.add('Access-Control-Allow-Headers", "Content-Type, Authorization, X-
Requested-With')
return response
else:
try:
#scaler = request.args.get("signal")
out = 9 * 2
response = jsonify(out)
response.headers.add("Access-Control-Allow-Origin", "*")
return response #sending data back to your frontend app
except ValueError:
return "invalid input xyz"
if __name__ == "__main__":
app.run(host="127.0.0.1", port=8080, debug=True)
以下是我所做的故障排除步骤:
-Added some headers to the response itself to indicate that it accepts cross-origin
-Tried installing an extension in Chrome that by-passes the CORS check
我仍然不完全理解CORS的概念，但我try 了很多解决方案，但没有任何效果！请帮忙.
