115 lines
4.3 KiB
Python
115 lines
4.3 KiB
Python
|
#!/usr/bin/env python3
|
|||
|
|
# -*- coding: utf-8 -*-
|
|||
|
|
"""
|
|||
|
|
立即测试CORS配置 - 模拟浏览器请求
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
import requests
|
|||
|
|
import json
|
|||
|
|
|
|||
|
|
def immediate_cors_test():
|
|||
|
|
"""立即测试CORS，模拟浏览器行为"""
|
|||
|
|
|
|||
|
|
api_base = "http://127.0.0.1:5000"
|
|||
|
|
|
|||
|
|
print("🔥 立即CORS测试 - 模拟浏览器请求")
|
|||
|
|
print("=" * 50)
|
|||
|
|
|
|||
|
|
# 模拟浏览器的标准头部
|
|||
|
|
browser_headers = {
|
|||
|
|
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
|
|||
|
|
'Accept': 'application/json, text/plain, */*',
|
|||
|
|
'Accept-Language': 'zh-CN,zh;q=0.9,en;q=0.8',
|
|||
|
|
'Origin': 'http://localhost:5173',
|
|||
|
|
'Referer': 'http://localhost:5173/',
|
|||
|
|
'Content-Type': 'application/json'
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 测试序列
|
|||
|
|
tests = [
|
|||
|
|
("/api/health", "GET", "基础健康检查"),
|
|||
|
|
("/api/stores", "GET", "店铺列表"),
|
|||
|
|
("/api/products", "GET", "产品列表"),
|
|||
|
|
("/api/training", "GET", "训练任务列表")
|
|||
|
|
]
|
|||
|
|
|
|||
|
|
for endpoint, method, description in tests:
|
|||
|
|
print(f"\n🧪 测试: {description}")
|
|||
|
|
print(f"📍 {method} {endpoint}")
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
# 1. 先发送OPTIONS预检请求（浏览器会自动发送）
|
|||
|
|
print(" 1️⃣ OPTIONS预检请求...")
|
|||
|
|
options_response = requests.options(
|
|||
|
|
f"{api_base}{endpoint}",
|
|||
|
|
headers=browser_headers,
|
|||
|
|
timeout=5
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
print(f" 状态: {options_response.status_code}")
|
|||
|
|
print(f" Allow-Origin: {options_response.headers.get('Access-Control-Allow-Origin', 'MISSING')}")
|
|||
|
|
print(f" Allow-Methods: {options_response.headers.get('Access-Control-Allow-Methods', 'MISSING')}")
|
|||
|
|
print(f" Allow-Headers: {options_response.headers.get('Access-Control-Allow-Headers', 'MISSING')}")
|
|||
|
|
|
|||
|
|
# 2. 发送实际请求
|
|||
|
|
print(" 2️⃣ 实际GET请求...")
|
|||
|
|
if method == "GET":
|
|||
|
|
actual_response = requests.get(
|
|||
|
|
f"{api_base}{endpoint}",
|
|||
|
|
headers=browser_headers,
|
|||
|
|
timeout=5
|
|||
|
|
)
|
|||
|
|
else:
|
|||
|
|
continue
|
|||
|
|
|
|||
|
|
print(f" 状态: {actual_response.status_code}")
|
|||
|
|
print(f" Allow-Origin: {actual_response.headers.get('Access-Control-Allow-Origin', 'MISSING')}")
|
|||
|
|
|
|||
|
|
if actual_response.status_code == 200:
|
|||
|
|
print(" ✅ 请求成功")
|
|||
|
|
else:
|
|||
|
|
print(f" ❌ 请求失败: {actual_response.status_code}")
|
|||
|
|
print(f" 错误详情: {actual_response.text[:200]}")
|
|||
|
|
|
|||
|
|
except requests.exceptions.ConnectionError:
|
|||
|
|
print(" ❌ 连接失败 - API服务器未启动")
|
|||
|
|
break
|
|||
|
|
except Exception as e:
|
|||
|
|
print(f" ❌ 异常: {e}")
|
|||
|
|
|
|||
|
|
# 特别测试一个可能有问题的端点
|
|||
|
|
print(f"\n🎯 特别测试: /api/stores (问题端点)")
|
|||
|
|
try:
|
|||
|
|
# 完全模拟浏览器的fetch请求
|
|||
|
|
test_response = requests.get(
|
|||
|
|
f"{api_base}/api/stores",
|
|||
|
|
headers={
|
|||
|
|
'Origin': 'http://localhost:5173',
|
|||
|
|
'Referer': 'http://localhost:5173/',
|
|||
|
|
'Accept': 'application/json',
|
|||
|
|
'Content-Type': 'application/json',
|
|||
|
|
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36'
|
|||
|
|
},
|
|||
|
|
timeout=5
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
print(f"状态码: {test_response.status_code}")
|
|||
|
|
print(f"响应头:")
|
|||
|
|
for header, value in test_response.headers.items():
|
|||
|
|
if 'access-control' in header.lower() or 'cors' in header.lower():
|
|||
|
|
print(f" {header}: {value}")
|
|||
|
|
|
|||
|
|
if test_response.status_code == 200:
|
|||
|
|
print("✅ /api/stores 端点工作正常")
|
|||
|
|
else:
|
|||
|
|
print(f"❌ /api/stores 端点返回: {test_response.status_code}")
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
print(f"❌ /api/stores 测试失败: {e}")
|
|||
|
|
|
|||
|
|
print(f"\n" + "=" * 50)
|
|||
|
|
print("💡 如果看到所有 'Allow-Origin: *'，CORS就配置正确了")
|
|||
|
|
print("🔄 请重启API服务器后重新测试")
|
|||
|
|
|
|||
|
|
if __name__ == "__main__":
|
|||
|
|
immediate_cors_test()
|