Odtnhj

I wrote a middleware for Django 2.1 to handle cross-domain XHR requests, but it's not working, in fact, it's not even getting called for requests or response and does n't print anything.

Settings.py

XS_SHARING_ALLOWED_METHODS = ['POST', 'GET', 'OPTIONS', 'PUT', 'DELETE']
XS_SHARING_ALLOWED_ORIGINS = "*"

MIDDLEWARE_CLASSES = [
 'django.middleware.security.SecurityMiddleware',
 'django.contrib.sessions.middleware.SessionMiddleware',
 'django.middleware.common.CommonMiddleware',
 'django.middleware.csrf.CsrfViewMiddleware',
 'django.contrib.auth.middleware.AuthenticationMiddleware',
 'django.contrib.messages.middleware.MessageMiddleware',
 'django.middleware.clickjacking.XFrameOptionsMiddleware',
 'app_name.middleware.crossdomainxhr.XsSharing',
]

crossdomainxhr.py

import logging
from django import http
from django.conf import settings

try:
 XS_SHARING_ALLOWED_ORIGINS = settings.XS_SHARING_ALLOWED_ORIGINS
except AttributeError:
 XS_SHARING_ALLOWED_ORIGINS = '*'

try:
 XS_SHARING_ALLOWED_METHODS = settings.XS_SHARING_ALLOWED_METHODS
except AttributeError:
 XS_SHARING_ALLOWED_METHODS = ['POST', 'GET', 'OPTIONS', 'PUT', 'DELETE']

try:
 XS_SHARING_ALLOWED_HEADERS = settings.XS_SHARING_ALLOWED_HEADERS
except:
 XS_SHARING_ALLOWED_HEADERS = ['Content-Type', '*']

try:
 XS_SHARING_ALLOWED_CREDENTIALS = 
 settings.XS_SHARING_ALLOWED_CREDENTIALS
except AttributeError:
 XS_SHARING_ALLOWED_CREDENTIALS = 'true'


class XsSharing:
 """
 This middleware allows cross-domain XHR using the html5 postMessage 
 API.
 """
 **EDIT**
 def __init__(self, get_response):
 print('Hi, I am middleware')
 self.get_response = get_response

 def __call__(self, request):
 print('hello')
 self.process_request(request)
 response = self.get_response(request)
 response = self.process_response(request, response)
 return response
 def process_request(self, request):
 print('calling request section')
 if 'HTTP_ACCESS_CONTROL_REQUEST_METHOD' in request.META:
 response = http.HttpResponse()
 response['Access-Control-Allow-Origin'] = 
 XS_SHARING_ALLOWED_ORIGINS
 response['Access-Control-Allow-Methods'] = 
 ",".join(XS_SHARING_ALLOWED_METHODS)
 response['Access-Control-Allow-Headers'] = 
 ",".join(XS_SHARING_ALLOWED_HEADERS)
 response['Access-Control-Allow-Credentials'] = 
 XS_SHARING_ALLOWED_CREDENTIALS
 return response

 return None

 def process_response(self, request, response):
 print('calling response')
 response['Access-Control-Allow-Origin'] = 
 XS_SHARING_ALLOWED_ORIGINS
 response['Access-Control-Allow-Methods'] = 
 ",".join(XS_SHARING_ALLOWED_METHODS)
 response['Access-Control-Allow-Headers'] = 
 ",".join(XS_SHARING_ALLOWED_HEADERS)
 response['Access-Control-Allow-Credentials'] = 
 XS_SHARING_ALLOWED_CREDENTIALS

 return response

Problem is if I call some URL of my app from another Django app then the request get blocked, Does anyone have any idea where I'm going wrong in this?

MIDDLEWARE_CLASSES was deprecated in Django 1.10 and removed in Django 2.0. You should use the MIDDLEWARE setting and a new-style middleware class.