From e3ff8d876eaca9009a2677e5e2eb62773f8e8d95 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?V=C3=AD=C3=B0ir=20Valberg=20Gu=C3=B0mundsson?=
 <valberg@orn.li>
Date: Thu, 14 Mar 2019 12:57:27 +0100
Subject: [PATCH] Enable CORS headers for /api/ endpoint. Also upgrade django
 to 2.1.7.

---
 src/bornhack/settings.py        | 5 +++++
 src/requirements/production.txt | 6 +++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/bornhack/settings.py b/src/bornhack/settings.py
index c7f6799c..31e7e2f1 100644
--- a/src/bornhack/settings.py
+++ b/src/bornhack/settings.py
@@ -45,6 +45,7 @@ INSTALLED_APPS = [
 
     'graphene_django',
     'channels',
+    'corsheaders',
 
     'profiles',
     'camps',
@@ -127,6 +128,7 @@ BOOTSTRAP3 = {
     'javascript_url': '/static/js/bootstrap.min.js'
 }
 MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.common.CommonMiddleware',
@@ -136,6 +138,9 @@ MIDDLEWARE = [
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
 ]
 
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_URLS_REGEX = r'^/api/*$'
+
 if DEBUG:
     EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'
     INSTALLED_APPS += [
diff --git a/src/requirements/production.txt b/src/requirements/production.txt
index 31f3a5a9..dd94d118 100644
--- a/src/requirements/production.txt
+++ b/src/requirements/production.txt
@@ -1,4 +1,4 @@
-Django==2.1.5
+Django==2.1.7
 channels==2.1.6
 channels-redis==2.3.2
 
@@ -16,6 +16,8 @@ django-extensions==2.1.4
 django-wkhtmltopdf==3.2.0
 django-reversion==3.0.2
 django-betterforms==1.2
+django-cors-headers==2.5.0
+django-filter==2.1.0
 docopt==0.6.2
 future==0.17.1
 html5lib==1.0.1
@@ -37,5 +39,3 @@ venusian==1.2.0
 webencodings==0.5.1
 wrapt==1.11.1
 graphene-django==2.2.0
-django-filter==2.1.0
-