124 lines
4.3 KiB
Python
124 lines
4.3 KiB
Python
|
#!/usr/bin/env python3
|
|||
|
|
# -*- coding: utf-8 -*-
|
|||
|
|
"""
|
|||
|
|
专门测试/api路径的CORS配置
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
import requests
|
|||
|
|
import json
|
|||
|
|
|
|||
|
|
def test_api_cors():
|
|||
|
|
"""测试/api路径的CORS配置"""
|
|||
|
|
|
|||
|
|
api_base = "http://127.0.0.1:5000"
|
|||
|
|
frontend_origin = "http://localhost:5174" # 实际的前端地址
|
|||
|
|
|
|||
|
|
print("🔍 测试/api路径CORS配置")
|
|||
|
|
print(f"📍 API地址: {api_base}")
|
|||
|
|
print(f"🌐 前端来源: {frontend_origin}")
|
|||
|
|
print("=" * 60)
|
|||
|
|
|
|||
|
|
# 测试端点列表
|
|||
|
|
test_endpoints = [
|
|||
|
|
"/api/health",
|
|||
|
|
"/api/stores",
|
|||
|
|
"/api/products",
|
|||
|
|
"/api/training",
|
|||
|
|
"/api/cors-test"
|
|||
|
|
]
|
|||
|
|
|
|||
|
|
for endpoint in test_endpoints:
|
|||
|
|
print(f"\n📋 测试端点: {endpoint}")
|
|||
|
|
print("-" * 40)
|
|||
|
|
|
|||
|
|
# 模拟前端请求的头部
|
|||
|
|
headers = {
|
|||
|
|
"Origin": frontend_origin,
|
|||
|
|
"Referer": f"{frontend_origin}/",
|
|||
|
|
"Accept": "application/json",
|
|||
|
|
"Content-Type": "application/json",
|
|||
|
|
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
# 1. OPTIONS预检请求
|
|||
|
|
print(" 1️⃣ OPTIONS预检请求...")
|
|||
|
|
options_resp = requests.options(
|
|||
|
|
f"{api_base}{endpoint}",
|
|||
|
|
headers=headers,
|
|||
|
|
timeout=5
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
print(f" 状态码: {options_resp.status_code}")
|
|||
|
|
cors_headers = {
|
|||
|
|
"Allow-Origin": options_resp.headers.get("Access-Control-Allow-Origin", "❌ 缺失"),
|
|||
|
|
"Allow-Methods": options_resp.headers.get("Access-Control-Allow-Methods", "❌ 缺失"),
|
|||
|
|
"Allow-Headers": options_resp.headers.get("Access-Control-Allow-Headers", "❌ 缺失")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
for header, value in cors_headers.items():
|
|||
|
|
print(f" {header}: {value}")
|
|||
|
|
|
|||
|
|
# 2. 实际GET请求
|
|||
|
|
print(" 2️⃣ GET请求...")
|
|||
|
|
get_resp = requests.get(
|
|||
|
|
f"{api_base}{endpoint}",
|
|||
|
|
headers=headers,
|
|||
|
|
timeout=5
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
print(f" 状态码: {get_resp.status_code}")
|
|||
|
|
print(f" Allow-Origin: {get_resp.headers.get('Access-Control-Allow-Origin', '❌ 缺失')}")
|
|||
|
|
|
|||
|
|
# 检查是否成功
|
|||
|
|
has_cors = get_resp.headers.get('Access-Control-Allow-Origin') == '*'
|
|||
|
|
if get_resp.status_code == 200 and has_cors:
|
|||
|
|
print(f" ✅ {endpoint} CORS配置正确")
|
|||
|
|
else:
|
|||
|
|
print(f" ❌ {endpoint} CORS配置有问题")
|
|||
|
|
|
|||
|
|
except requests.exceptions.ConnectionError:
|
|||
|
|
print(f" ❌ 连接失败 - API服务器未启动")
|
|||
|
|
break
|
|||
|
|
except Exception as e:
|
|||
|
|
print(f" ❌ 测试失败: {e}")
|
|||
|
|
|
|||
|
|
# 特别测试一个有问题的端点
|
|||
|
|
print(f"\n🔥 深度测试 /api/stores")
|
|||
|
|
print("=" * 60)
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
# 完整模拟浏览器行为
|
|||
|
|
session = requests.Session()
|
|||
|
|
session.headers.update({
|
|||
|
|
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
|
|||
|
|
"Accept": "application/json, text/plain, */*",
|
|||
|
|
"Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8",
|
|||
|
|
"Accept-Encoding": "gzip, deflate, br",
|
|||
|
|
"Origin": frontend_origin,
|
|||
|
|
"Referer": f"{frontend_origin}/"
|
|||
|
|
})
|
|||
|
|
|
|||
|
|
# 发送请求
|
|||
|
|
response = session.get(f"{api_base}/api/stores")
|
|||
|
|
|
|||
|
|
print(f"状态码: {response.status_code}")
|
|||
|
|
print(f"响应头:")
|
|||
|
|
for header, value in response.headers.items():
|
|||
|
|
if 'cors' in header.lower() or 'access-control' in header.lower():
|
|||
|
|
print(f" {header}: {value}")
|
|||
|
|
|
|||
|
|
if response.status_code == 200:
|
|||
|
|
print(f"响应数据: {response.text[:100]}...")
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
print(f"深度测试失败: {e}")
|
|||
|
|
|
|||
|
|
print("\n" + "=" * 60)
|
|||
|
|
print("💡 测试总结:")
|
|||
|
|
print(" - 如果看到所有端点都有 'Access-Control-Allow-Origin: *'，CORS配置正确")
|
|||
|
|
print(" - 如果仍有错误，请重启API服务器")
|
|||
|
|
print(f" - 确保前端在 {frontend_origin} 运行")
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
test_api_cors()
|