# coding=utf-8
"""
    @project: maxkb
    @Author：虎
    @file： cross_domain_middleware.py
    @date：2024/5/8 13:36
    @desc:
"""
from django.db.models import QuerySet
from django.http import HttpResponse
from django.utils.deprecation import MiddlewareMixin

from application.models.api_key_model import ApplicationApiKey


class CrossDomainMiddleware(MiddlewareMixin):

    def process_request(self, request):
        if request.method == 'OPTIONS':
            auth = request.META.get('HTTP_AUTHORIZATION')
            if auth is not None and str(auth).startswith("application-"):
                application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=auth).first()
                if application_api_key.allow_cross_domain:
                    return HttpResponse(status=200,
                                        headers={
                                            "Access-Control-Allow-Origin": "*" if application_api_key.cross_domain_list is None or len(
                                                application_api_key.cross_domain_list) == 0 else ",".join(
                                                application_api_key.cross_domain_list),
                                            "Access-Control-Allow-Methods": "GET,POST,DELETE,PUT",
                                            "Access-Control-Allow-Headers": "Origin,X-Requested-With,Content-Type,Accept,Authorization,token"})

    def process_response(self, request, response):
        auth = request.META.get('HTTP_AUTHORIZATION')
        if auth is not None and str(auth).startswith("application-"):
            application_api_key = QuerySet(ApplicationApiKey).filter(secret_key=auth).first()
            if application_api_key.allow_cross_domain:
                response['Access-Control-Allow-Origin'] = "*" if application_api_key.cross_domain_list is None or len(
                    application_api_key.cross_domain_list) == 0 else ",".join(
                    application_api_key.cross_domain_list)
                response['Access-Control-Allow-Methods'] = 'GET,POST,DELETE,PUT'
                response[
                    'Access-Control-Allow-Headers'] = "Origin,X-Requested-With,Content-Type,Accept,Authorization,token"
        return response