当我尝试删除或编辑任务(待办事项)时,出现DELETE http://127.0.0.1:8000/api/tasks/4/ 403 (Forbidden)
。但是,当我只想获取任务时,一切都能正常工作。也许CORS中的问题。我在INSTALLED_APPS中有'corsheaders‘,在中间件中有'corsheaders.middleware.CorsMiddleware’
serializers.py
class TaskSerializer(serializers.ModelSerializer):
class Meta:
model = Task
fields = ('pk', 'title', 'created_at', 'is_done')
settings.py
CORS_ALLOW_METHODS = [
'DELETE',
'GET',
'OPTIONS',
'PATCH',
'POST',
'PUT',
]
CORS_ALLOWED_ORIGINS = [
"http://localhost:3000",
"http://127.0.0.1:8000",
]
App.js
function removeTodo(id){
axios.delete(`http://127.0.0.1:8000/api/tasks/${id}`)
}
发布于 2021-04-17 11:35:42
在views.py中,我没有创建一个删除(‘@api_view’)等,并将其添加到urls.py views.py
@api_view(['GET'])
def taskList(request):
tasks = Task.objects.all().order_by('-id')
serializer = TaskSerializer(tasks, many=True)
return Response(serializer.data)
@api_view(['POST'])
def taskCreate(request):
serializer = TaskSerializer(data=request.data)
if serializer.is_valid():
serializer.save()
return Response(serializer.data)
@api_view(['DELETE'])
def taskDelete(request, pk):
task = Task.objects.get(id=pk)
task.delete()
return Response('Item successfully delete!')
发布于 2021-07-07 22:24:54
在您的settings.py中只需添加:
REST_FRAMEWORK = {
'DEFAULT_AUTHENTICATION_CLASSES': (
'rest_framework.authentication.TokenAuthentication',
)
}
这之所以有效,是因为通过这些设置,我们可以使用Django的标准django.contrib.auth
权限,或者允许未经身份验证的用户只读访问。
https://stackoverflow.com/questions/67128580
复制相似问题