CORS for website container

Author: futa-ikeda

poetry.lock

@@ -95,6 +95,7 @@ django-elasticsearch-metrics = {git ="https://github.com/CenterForOpenScience/dj
 djangorestframework-csv = "3.0.2"
 gevent = "24.2.1"
 packaging = "^24.0"
+flask-cors = "6.0.1"
 
 [tool.poetry.group.dev.dependencies]
 pytest = "7.4.4"

pyproject.toml

@@ -1,3 +1,5 @@
+from flask_cors import CORS
+
 import framework
 import importlib
 import json
@@ -6,6 +8,8 @@
 from collections import OrderedDict
 
 import django
+
+from api.base.settings import CORS_ORIGIN_WHITELIST
 from api.caching import listeners  # noqa
 from django.apps import apps
 from framework.addons.utils import render_addon_capabilities
@@ -89,6 +93,7 @@ def init_app(settings_module='website.settings', set_backends=True, routes=True,
     if app.config.get('IS_INITIALIZED', False) is True:
         return app
 
+    CORS(app, supports_credentials=True, origins=CORS_ORIGIN_WHITELIST)
     setup_django()
 
     # The settings module