我如何使Cloudfiles FormPost返回“ Access-Control-Allow-Origin”标头以启用CORS？

我想在我的Rackspace CluodFiles容器中启用CORS,因此在阅读了文档之后,我看到我必须设置一些容器元数据(我正在使用Python和Pyrax)：

from pyrax import cloudfiles

cloudfiles.set_container_Metadata(container_name, {
    'X-Container-Meta-Access-Control-Allow-Origin': 'localhost:8000',
    'X-Container-Meta-Access-Control-Expose-Headers': 'Access-Control-Allow-Origin',
    'X-Container-Meta-Access-Control-Max-Age': '10',
})
print cloudfiles.get_container_Metadata(container_name)

我得到的输出：

{'x-container-Meta-access-control-allow-origin': 'localhost:8000',
 'x-container-Meta-access-control-expose-headers': 'Access-Control-Allow-Origin',
 'x-container-Meta-access-control-max-age': '10',
 'x-container-Meta-access-log-delivery': 'false'}

但是浏览器在OPTIONS预检请求中未获得Access-Control-Allow-Origin,因此它取消了AJAX调用：

HTTP/1.1 401 Unauthorized
Content-Length: 131
Content-Type: text/html; charset=UTF-8
Allow: HEAD, GET, PUT, POST, copY, OPTIONS, DELETE
X-Trans-Id: txXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Date: Wed, 13 Nov 2013 20:07:34 GMT
Connection: keep-alive

缺少了什么？

谢谢！

解决方法:

Rackspace上有关于如何为here容器启用CORS的文档.示例7.11是CORS测试页,可让您在尝试上传文件之外测试配置.

测试CORS页面-接受令牌和指向对象或容器的URL,让我们尝试在其上调用HTTP方法.

注意：我删除了“ DELETE”方法,因为它可能会产生不希望的结果(例如删除容器/对象)

<!DOCTYPE html>
<html>
  <head>
    <Meta charset="utf-8">
    <title>Test CORS</title>
  </head>
  <body>

    Token<br><input id="token" type="text" size="64"><br><br>

    Method<br>
    <select id="method">
        <option value="GET">GET</option>
        <option value="HEAD">HEAD</option>
        <option value="POST">POST</option>
        <option value="PUT">PUT</option>
    </select><br><br>

    URL (Container or Object)<br><input id="url" size="64" type="text"><br><br>

    <input id="submit" type="button" value="Submit" onclick="submit(); return false;">

    <pre id="response_headers"></pre>
    <p>
    <hr>
    <pre id="response_body"></pre>

    <script type="text/javascript">
      function submit() {
          var token = document.getElementById('token').value;
          var method = document.getElementById('method').value;
          var url = document.getElementById('url').value;

          document.getElementById('response_headers').textContent = null;
          document.getElementById('response_body').textContent = null;

          var request = new XMLHttpRequest();

          request.onreadystatechange = function (oEvent) {
              if (request.readyState == 4) {
                  responseHeaders = 'Status: ' + request.status;
                  responseHeaders = responseHeaders + '\nStatus Text: ' + request.statusText;
                  responseHeaders = responseHeaders + '\n\n' + request.getAllResponseHeaders();
                  document.getElementById('response_headers').textContent = responseHeaders;
                  document.getElementById('response_body').textContent = request.responseText;
              }
          }

          request.open(method, url);
          request.setRequestHeader('X-Auth-Token', token);
          request.send(null);
      }
    </script>

  </body>
</html>

要在pyrax或任何其他SDK之外设置这些值,我使用了以下代码：

https://gist.github.com/chrisrasco/7455804

请记住在适当的位置设置用户名,apikey和容器的路径.

我如何使Cloudfiles FormPost返回“ Access-Control-Allow-Origin”标头以启用CORS？

相关推荐