Update django.md

django.md

@@ -162,5 +162,39 @@ class ContactDetail(generics.RetrieveUpdateDestroyAPIView):
 ```
 
 ## Add CORS
+
+```
+python -m pip install django-cors-headers
+```
+
+edit django_rest_api/settings.py
+
+```python
+INSTALLED_APPS = [
+    'corsheaders', # add this
+    'rest_framework',
+    'contacts_api',
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+]
+
+MIDDLEWARE = [
+    'corsheaders.middleware.CorsMiddleware', # add this
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+CORS_ALLOW_ALL_ORIGINS = True # add this
+```
+
 ## Switch to Postgres
 ## Deploy to Heroku