heroku DRF在本地主机上可以正确进行身份验证，但在auth0托管的angular应用程序上无法与heroku托管的DRF应用程序进行对话

# settings.py
INSTALLED_APPS = [
    ...
    'corsheaders',
    ...
]

MIDDLEWARE = [
    ...
    'corsheaders.middleware.CorsMiddleware',
    ...
]

CORS_ORIGIN_ALLOW_ALL = False
CORS_ORIGIN_WHITELIST = [
    'https://your-angular-app.auth0.com',  # 替换为你的 Auth0 域名
]

import { HttpClient, HttpHeaders } from '@angular/common/http';

const httpOptions = {
  headers: new HttpHeaders({
    'Authorization': 'Bearer ' + yourAccessToken  // 替换为你的访问令牌
  })
};

this.http.get('https://your-drf-app.herokuapp.com/api/endpoint', httpOptions)
  .subscribe(data => {
    console.log(data);
  });

# settings.py
REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': [
        'rest_framework.authentication.TokenAuthentication',
        'rest_framework.authentication.SessionAuthentication',
        # 添加自定义认证后端
        'your_app.backends.Auth0Authentication',
    ],
}

# your_app/backends.py
from rest_framework import authentication
from rest_framework import exceptions

class Auth0Authentication(authentication.BaseAuthentication):
    def authenticate(self, request):
        auth_header = authentication.get_authorization_header(request).split()

        if not auth_header or auth_header[0].lower() != b'bearer':
            return None

        if len(auth_header) == 1:
            msg = 'Invalid token header. No credentials provided.'
            raise exceptions.AuthenticationFailed(msg)
        elif len(auth_header) > 2:
            msg = 'Invalid token header. Token string should not contain spaces.'
            raise exceptions.AuthenticationFailed(msg)

        try:
            token = auth_header[1].decode('utf-8')
        except UnicodeError:
            msg = 'Invalid token header. Token string should not contain invalid characters.'
            raise exceptions.AuthenticationFailed(msg)

        # 验证令牌逻辑
        user = self.validate_token(token)

        if not user:
            raise exceptions.AuthenticationFailed('Invalid token.')

        return (user, None)

    def validate_token(self, token):
        # 实现验证令牌的逻辑
        pass