Getting the request origin in a Django request

Question

So I'm trying to enable cross origin resource sharing in Django, so I can post to an external site, and it's easy to do when I set

response["Access-Control-Allow-Origin"]="*" 

but I want to instead have it check whether the origin is in an allowed list of origins (essentially to restrict it to only allow specific sites) but I can't seem to find anywhere in the Django request where I can get the origin information.

I tried using request.META['HTTP_HOST'] but that just returns the site that's being posted to. Does anyone know where in the Request object I can get the origin of the request?

Answer 1

As for getting the url from request (which is what I was looking for), use request.META['HTTP_REFERER'] instead.

Answer 2

In Django,

request.headers['Origin']

answers the original question.

You can print(request.headers) to see everything available in the headers.

Answer 3

Use this:

origin = request.META.get("HTTP_ORIGIN")

This is the way django-cors-headers use it in the middleware: