Skip to main content

Build Status Latest Version Supported Python versions License

A Flask extension for handling Cross Origin Resource Sharing (CORS), making cross-origin AJAX possible.

This package has a simple philosophy, when you want to enable CORS, you wish to enable it for all use cases on a domain. This means no mucking around with different allowed headers, methods, etc. By default, submission of cookies across domains is disabled due to the security implications, please see the documentation for how to enable credential’ed requests, and please make sure you add some sort of CRSF protection before doing so!

Installation

Install the extension with using pip, or easy_install.

$ pip install -U flask-cors

Usage

This package exposes a Flask extension which by default enables CORS support on all routes, for all origins and methods. It allows parameterization of all CORS headers on a per-resource level. The package also contains a decorator, for those who prefer this approach.

Simple Usage

In the simplest case, initialize the Flask-Cors extension with default arguments in order to allow CORS for all domains on all routes. See the full list of options in the documentation.

from flask import Flask
from flask_cors import CORS, cross_origin

app = Flask(__name__)
CORS(app)

@app.route("/")
def helloWorld():
  return "Hello, cross-origin-world!"

Resource specific CORS

Alternatively, you can specify CORS options on a resource and origin level of granularity by passing a dictionary as the resources option, mapping paths to a set of options. See the full list of options in the documentation.

app = Flask(__name__)
cors = CORS(app, resources={r"/api/*": {"origins": "*"}})

@app.route("/api/v1/users")
def list_users():
  return "user example"

Route specific CORS via decorator

This extension also exposes a simple decorator to decorate flask routes with. Simply add @cross_origin() below a call to Flask’s @app.route(..) to allow CORS on a given route. See the full list of options in the decorator documentation.

@app.route("/")
@cross_origin()
def helloWorld():
  return "Hello, cross-origin-world!"

Documentation

For a full list of options, please see the full documentation

Troubleshooting

If things aren’t working as you expect, enable logging to help understand what is going on under the hood, and why.

logging.getLogger('flask_cors').level = logging.DEBUG

Tests

A simple set of tests is included in test/. To run, install nose, and simply invoke nosetests or python setup.py test to exercise the tests.

Contributing

Questions, comments or improvements? Please create an issue on Github, tweet at @corydolphin or send me an email. I do my best to include every contribution proposed in any way that I can.

Credits

This Flask extension is based upon the Decorator for the HTTP Access Control written by Armin Ronacher.

Release files for flask-cors 3.0.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for flask-cors 3.0.2
File Size Uploaded
Flask-Cors-3.0.2.tar.gz 28.4 kB Details

Built distributions (wheels)

Table of built distributions (wheels) for flask-cors 3.0.2
File Interpreter ABI Platform
Flask_Cors-3.0.2-py2.py3-none-any.whl Python 2, Python 3 none any Details
Flask_Cors-3.0.2-py2.7.egg Legacy Egg format - - Details

Total release size: 69.0 kB

Release files / Flask-Cors-3.0.2.tar.gz

Download URL Flask-Cors-3.0.2.tar.gz
Size 28.4 kB
Tags Source
SHA-256 checksum
How to use checksums
0a09f3559ded4759387dfa2a355de59bc161f67269a1f4b7b0712a64b1f7dad6
BLAKE2b-256 checksum
How to use checksums
1dea86765a4ae667b4517dc16ef0fc8dd632ca3ea56ef419c4a6de31e715324e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release files / Flask_Cors-3.0.2-py2.py3-none-any.whl

Download URL Flask_Cors-3.0.2-py2.py3-none-any.whl
Size 15.8 kB
Tags Python 2 Python 3
SHA-256 checksum
How to use checksums
66a78dd308157f17296a254f793eba4cda1f75bfc96d9c5e33ad12bf9a411287
BLAKE2b-256 checksum
How to use checksums
4f4fea10ca247c21b6512766cf730621697ec2766fb2f712245b2c00983a57b1
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release files / Flask_Cors-3.0.2-py2.7.egg

Download URL Flask_Cors-3.0.2-py2.7.egg
Size 24.9 kB
Tags Egg
SHA-256 checksum
How to use checksums
149a2cca7bb5785324ed12afc0f327050f4e5e397113359b1390e4430b55b3dd
BLAKE2b-256 checksum
How to use checksums
3d19570be953d317b1900980f417a09c141017d6ffbd5b4673ba9a86f27b74c7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Release history Release notifications | RSS feed

6.0.5

2 release files

6.0.4

2 release files

6.0.3

2 release files

6.0.2

2 release files

6.0.1

2 release files

6.0.0

2 release files

5.0.1

2 release files

5.0.0

2 release files

4.0.2

2 release files

4.0.1

2 release files

4.0.0

2 release files

3.0.9

2 release files

3.0.8

2 release files

3.0.7

2 release files

3.0.6

2 release files

3.0.4

2 release files

3.0.3

3 release files

This release

3.0.2 This release

3 release files

3.0.1

3 release files

3.0.0

3 release files

2.1.3

2 release files

2.1.2

2 release files

2.1.1

2 release files

2.1.0

1 release file

2.0.1

1 release file

2.0.0

1 release file

1.10.3

1 release file

1.10.2

3 release files

1.10.1

3 release files

1.10.0

3 release files

1.9.0

3 release files

1.8.1

3 release files

1.8.0

3 release files

1.7.4

3 release files

1.7.3

3 release files

1.7.2

3 release files

1.7.1

3 release files

1.7.0

3 release files

1.6.1

3 release files

1.6.0

3 release files

1.5.0

1 release file

1.4.0

1 release file

1.3.1

1 release file

1.3.0

1 release file

1.2.1

1 release file

1.2.0

1 release file

1.1.3

1 release file

1.1.2

1 release file

1.1.1

1 release file

1.1

1 release file

1.0

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page