fix: cors all origin access blocked

Author: rohan220217

cvat/apps/engine/mixins.py

@@ -295,9 +295,8 @@ def init_tus_upload(self, request):
 
             tus_file = TusFile.create_file(metadata, file_size, self.get_upload_dir())
 
-            location = request.build_absolute_uri()
-            if 'HTTP_X_FORWARDED_HOST' not in request.META:
-                location = request.META.get('HTTP_ORIGIN') + request.META.get('PATH_INFO')
+            backend_base_url = settings.CVAT_BASE_URL
+            location = backend_base_url + request.META.get('PATH_INFO')
 
             if import_type in ('backup', 'annotations', 'datasets'):
                 scheduler = django_rq.get_scheduler(settings.CVAT_QUEUES.CLEANING.value)

cvat/apps/notifications/views.py

@@ -297,7 +297,7 @@ def MarkNotificationAsViewed(self, request: Request):
                             "data": {},
                             "error": None
                         },
-                        status = status.HTTP_404_NOT_FOUND
+                        status = status.HTTP_400_BAD_REQUEST
                     )
 
                 return Response(

cvat/settings/base.py

@@ -38,11 +38,15 @@
 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
 BASE_DIR = str(Path(__file__).parents[2])
 
-# ALLOWED_HOSTS = ["*"]
 ALLOWED_HOSTS = os.environ.get('ALLOWED_HOSTS', 'localhost,127.0.0.1').split(',')
 INTERNAL_IPS = ['127.0.0.1']
 
-# CORS_ORIGIN_ALLOW_ALL = True
+CORS_ALLOWED_ORIGINS = [
+    "http://localhost:3000",
+    "http://127.0.0.1:3000",
+    "https://app.audino.in",
+]
+CORS_ALLOW_CREDENTIALS = True
 
 def generate_secret_key():
     """

cvat/settings/development.py

@@ -16,6 +16,7 @@
 # Django-sendfile:
 # https://github.com/moggers87/django-sendfile2
 SENDFILE_BACKEND = 'django_sendfile.backends.development'
+CVAT_BASE_URL = 'http://127.0.0.1:7000'
 
 # Cross-Origin Resource Sharing settings for CVAT UI
 UI_SCHEME = os.environ.get('UI_SCHEME', 'http')