Python Tornado Web HTTP OPTIONS preflight & CORS & secure cookie
class BaseHandler(tornado.web.RequestHandler): def initialize(self, config=None): self.config = config
def get_current_user(self): return self.get_secure_cookie('secureCookie')
def set_default_headers(self): self.set_header("Access-Control-Allow-Origin", "*")
def options(self, *args, **kwargs): if "Access-Control-Request-Method" in self.request.headers: self.set_header("Access-Control-Allow-Methods", self.request.headers["Access-Control-Request-Method"])
if "Access-Control-Request-Headers" in self.request.headers: self.set_header("Access-Control-Allow-Headers", self.request.headers["Access-Control-Request-Headers"])
