124 lines
4.3 KiB
Python
124 lines
4.3 KiB
Python
#!/usr/bin/env python3
|
||
# -*- coding: utf-8 -*-
|
||
"""
|
||
专门测试/api路径的CORS配置
|
||
"""
|
||
|
||
import requests
|
||
import json
|
||
|
||
def test_api_cors():
|
||
"""测试/api路径的CORS配置"""
|
||
|
||
api_base = "http://127.0.0.1:5000"
|
||
frontend_origin = "http://localhost:5174" # 实际的前端地址
|
||
|
||
print("🔍 测试/api路径CORS配置")
|
||
print(f"📍 API地址: {api_base}")
|
||
print(f"🌐 前端来源: {frontend_origin}")
|
||
print("=" * 60)
|
||
|
||
# 测试端点列表
|
||
test_endpoints = [
|
||
"/api/health",
|
||
"/api/stores",
|
||
"/api/products",
|
||
"/api/training",
|
||
"/api/cors-test"
|
||
]
|
||
|
||
for endpoint in test_endpoints:
|
||
print(f"\n📋 测试端点: {endpoint}")
|
||
print("-" * 40)
|
||
|
||
# 模拟前端请求的头部
|
||
headers = {
|
||
"Origin": frontend_origin,
|
||
"Referer": f"{frontend_origin}/",
|
||
"Accept": "application/json",
|
||
"Content-Type": "application/json",
|
||
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
|
||
}
|
||
|
||
try:
|
||
# 1. OPTIONS预检请求
|
||
print(" 1️⃣ OPTIONS预检请求...")
|
||
options_resp = requests.options(
|
||
f"{api_base}{endpoint}",
|
||
headers=headers,
|
||
timeout=5
|
||
)
|
||
|
||
print(f" 状态码: {options_resp.status_code}")
|
||
cors_headers = {
|
||
"Allow-Origin": options_resp.headers.get("Access-Control-Allow-Origin", "❌ 缺失"),
|
||
"Allow-Methods": options_resp.headers.get("Access-Control-Allow-Methods", "❌ 缺失"),
|
||
"Allow-Headers": options_resp.headers.get("Access-Control-Allow-Headers", "❌ 缺失")
|
||
}
|
||
|
||
for header, value in cors_headers.items():
|
||
print(f" {header}: {value}")
|
||
|
||
# 2. 实际GET请求
|
||
print(" 2️⃣ GET请求...")
|
||
get_resp = requests.get(
|
||
f"{api_base}{endpoint}",
|
||
headers=headers,
|
||
timeout=5
|
||
)
|
||
|
||
print(f" 状态码: {get_resp.status_code}")
|
||
print(f" Allow-Origin: {get_resp.headers.get('Access-Control-Allow-Origin', '❌ 缺失')}")
|
||
|
||
# 检查是否成功
|
||
has_cors = get_resp.headers.get('Access-Control-Allow-Origin') == '*'
|
||
if get_resp.status_code == 200 and has_cors:
|
||
print(f" ✅ {endpoint} CORS配置正确")
|
||
else:
|
||
print(f" ❌ {endpoint} CORS配置有问题")
|
||
|
||
except requests.exceptions.ConnectionError:
|
||
print(f" ❌ 连接失败 - API服务器未启动")
|
||
break
|
||
except Exception as e:
|
||
print(f" ❌ 测试失败: {e}")
|
||
|
||
# 特别测试一个有问题的端点
|
||
print(f"\n🔥 深度测试 /api/stores")
|
||
print("=" * 60)
|
||
|
||
try:
|
||
# 完整模拟浏览器行为
|
||
session = requests.Session()
|
||
session.headers.update({
|
||
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
|
||
"Accept": "application/json, text/plain, */*",
|
||
"Accept-Language": "zh-CN,zh;q=0.9,en;q=0.8",
|
||
"Accept-Encoding": "gzip, deflate, br",
|
||
"Origin": frontend_origin,
|
||
"Referer": f"{frontend_origin}/"
|
||
})
|
||
|
||
# 发送请求
|
||
response = session.get(f"{api_base}/api/stores")
|
||
|
||
print(f"状态码: {response.status_code}")
|
||
print(f"响应头:")
|
||
for header, value in response.headers.items():
|
||
if 'cors' in header.lower() or 'access-control' in header.lower():
|
||
print(f" {header}: {value}")
|
||
|
||
if response.status_code == 200:
|
||
print(f"响应数据: {response.text[:100]}...")
|
||
|
||
except Exception as e:
|
||
print(f"深度测试失败: {e}")
|
||
|
||
print("\n" + "=" * 60)
|
||
print("💡 测试总结:")
|
||
print(" - 如果看到所有端点都有 'Access-Control-Allow-Origin: *'，CORS配置正确")
|
||
print(" - 如果仍有错误，请重启API服务器")
|
||
print(f" - 确保前端在 {frontend_origin} 运行")
|
||
|
||
if __name__ == "__main__":
|
||
test_api_cors() |