feat(controller): add CORS headers to api

Author: Joshua-Anderson

controller/deis/settings.py

@@ -102,6 +102,7 @@
 )
 
 MIDDLEWARE_CLASSES = (
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -141,6 +142,7 @@
     'rest_framework',
     'rest_framework.authtoken',
     'south',
+    'corsheaders',
     # Deis apps
     'api',
     'web',
@@ -161,6 +163,20 @@
 
 SOUTH_TESTS_MIGRATE = False
 
+CORS_ORIGIN_ALLOW_ALL = True
+
+CORS_ALLOW_HEADERS = (
+    'content-type',
+    'accept',
+    'origin',
+    'Authentication',
+)
+
+CORS_EXPOSE_HEADERS = (
+    'X_DEIS_VERSION',
+    'X_DEIS_RELEASE',
+)
+
 REST_FRAMEWORK = {
     'DEFAULT_MODEL_SERIALIZER_CLASS':
     'rest_framework.serializers.ModelSerializer',

controller/requirements.txt

@@ -18,3 +18,4 @@ PyYAML==3.11
 redis==2.9.1
 static==1.0.2
 South==1.0
+django-cors-headers==0.13

docs/docs_requirements.txt

@@ -19,6 +19,7 @@ paramiko==1.14.1
 psycopg2==2.5.4
 python-etcd==0.3.0
 South==1.0
+django-cors-headers==0.13
 
 # Deis client requirements
 docopt==0.6.2