[QUESTION] How would I add CORS header `Access-Control-Allow-Origin`?

In developing a web frontend for busylight, I would like to allow the development machine (running a self-hosted dev version of the web UI) to make requests to the server where the busylight API is hosted.

Currently, browsers refuse to make those requests, claiming an Access-Control-Allow-Origin header is missing.

Where would I add that header in busylight_api.py? I don’t think adding the header to every single GET endpoint is the right way – is there some general/middleware layer in which I can add headers to all responses?

I’m willing to make the change and submit a PR – just not too familiar with where in the API code to add things 😅

[JnyJny]

I manage dependencies and packaging with the tool poetry. You can pip install it for convenience:

$ python3 -m pip install poetry
$ cd path/to/busylight
$ poetry shell
<venv> $ poetry install --extras webapi
<venv> $ busyserve -D

You can use plain python virtual environments using the requirements.txt in the root of the project, however that file is often out of date:

$ python3 -m venv .venv
$ source .venv/bin/activate
$ python3 -m pip install -r requirements.txt
$ python3 -m pip install -e .
# now busylight is installed in editable mode in the new virtual environment

[JnyJny]

I’ve updated the top-level README.md to include development installation instructions using poetry. That way its harder for me to forget how it works and mislead people who ask.