[FIX] cors settings

odoo_control/settings.py

@@ -78,11 +78,7 @@ STATICFILES_STORAGE = 'whitenoise.storage.CompressedManifestStaticFilesStorage'
 TASTYPIE_DEFAULT_FORMATS = ['json', 'xml']
 SECRET_KEY = config('SECRET_KEY')
 ALLOWED_HOSTS = config('ALLOWED_HOSTS', cast=Csv())
-CORS_ORIGIN_ALLOW_ALL = True
-# CORS_ALLOW_HEADERS = default_headers + (
-#     'withCredentials',
-#     'credentials'
-# )
+CORS_ORIGIN_ALLOW_ALL = config('DEBUG', default=False, cast=bool)
 CORS_ALLOW_CREDENTIALS = True
 DEBUG = config('DEBUG', default=False, cast=bool)
 JWT_ACCEPT_HEADER = config('JWT_ACCEPT_HEADER')