prompt: We are currently solving the following issue within our repository. Here is the issue text:
  --- BEGIN ISSUE ---
  API routes should be enabled for CORS
  Only API routes should be whitelisted for CORS
  
  We need to make sure that CORS and session auth are mutually exclusive
  
  The solution is probably to integrate https://github.com/ottoyiu/django-cors-headers/
  
  
  --- END ISSUE ---
  
  Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
  --- BEGIN FILES ---
  Path: `nextcloudappstore/settings.py`
  Content:
  ```
  1 """
  2 Django settings for nextcloudappstore project.
  3 
  4 Generated by 'django-admin startproject' using Django 1.9.6.
  5 
  6 For more information on this file, see
  7 https://docs.djangoproject.com/en/1.9/topics/settings/
  8 
  9 For the full list of settings and their values, see
  10 https://docs.djangoproject.com/en/1.9/ref/settings/
  11 """
  12 
  13 import os
  14 
  15 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
  16 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
  17 
  18 # Quick-start development settings - unsuitable for production
  19 # See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/
  20 
  21 # Application definition
  22 
  23 INSTALLED_APPS = [
  24     'parler',
  25     'rest_framework',
  26     'django.contrib.admin',
  27     'django.contrib.auth',
  28     'django.contrib.contenttypes',
  29     'django.contrib.sessions',
  30     'django.contrib.messages',
  31     # The Django sites framework is required by allauth
  32     'django.contrib.sites',
  33     'django.contrib.staticfiles',
  34     'captcha',
  35     'nextcloudappstore.core.apps.CoreConfig',
  36     'allauth',
  37     'allauth.account',
  38     'allauth.socialaccount',
  39     'allauth.socialaccount.providers.github',
  40     'allauth.socialaccount.providers.bitbucket',
  41 ]
  42 
  43 MIDDLEWARE_CLASSES = [
  44     'django.middleware.security.SecurityMiddleware',
  45     'django.contrib.sessions.middleware.SessionMiddleware',
  46     'django.middleware.common.CommonMiddleware',
  47     'django.middleware.csrf.CsrfViewMiddleware',
  48     'django.contrib.auth.middleware.AuthenticationMiddleware',
  49     'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
  50     'django.contrib.messages.middleware.MessageMiddleware',
  51     'django.middleware.clickjacking.XFrameOptionsMiddleware',
  52 ]
  53 
  54 ROOT_URLCONF = 'nextcloudappstore.urls'
  55 
  56 TEMPLATES = [
  57     {
  58         'BACKEND': 'django.template.backends.django.DjangoTemplates',
  59         'DIRS': [],
  60         'APP_DIRS': True,
  61         'OPTIONS': {
  62             'context_processors': [
  63                 'django.template.context_processors.debug',
  64                 'django.template.context_processors.request',
  65                 'django.contrib.auth.context_processors.auth',
  66                 'django.contrib.messages.context_processors.messages',
  67             ],
  68         },
  69     },
  70 ]
  71 
  72 WSGI_APPLICATION = 'nextcloudappstore.wsgi.application'
  73 
  74 # Database
  75 # https://docs.djangoproject.com/en/1.9/ref/settings/#databases
  76 
  77 DATABASES = {
  78     'default': {
  79         'ENGINE': 'django.db.backends.sqlite3',
  80         'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
  81         'TEST': {
  82             'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),
  83         }
  84     }
  85 }
  86 
  87 AUTHENTICATION_BACKENDS = (
  88     # Needed to login by username in Django admin, regardless of `allauth`
  89     'django.contrib.auth.backends.ModelBackend',
  90 
  91     # `allauth` specific authentication methods, such as login by e-mail
  92     'allauth.account.auth_backends.AuthenticationBackend',
  93 )
  94 
  95 # Password validation
  96 # https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators
  97 
  98 AUTH_PASSWORD_VALIDATORS = [
  99     {
  100         'NAME': 'django.contrib.auth.password_validation'
  101                 '.UserAttributeSimilarityValidator',
  102     },
  103     {
  104         'NAME': 'django.contrib.auth.password_validation'
  105                 '.MinimumLengthValidator',
  106     },
  107     {
  108         'NAME': 'django.contrib.auth.password_validation'
  109                 '.CommonPasswordValidator',
  110     },
  111     {
  112         'NAME': 'django.contrib.auth.password_validation'
  113                 '.NumericPasswordValidator',
  114     },
  115 ]
  116 
  117 REST_FRAMEWORK = {
  118     'DEFAULT_RENDERER_CLASSES': (
  119         'djangorestframework_camel_case.render.CamelCaseJSONRenderer',
  120     ),
  121     'DEFAULT_PARSER_CLASSES': (
  122         'djangorestframework_camel_case.parser.CamelCaseJSONParser',
  123     ),
  124     'DEFAULT_THROTTLE_RATES': {
  125         'app_upload': '100/day'
  126     }
  127 }
  128 
  129 SITE_ID = 1
  130 
  131 # Allauth configuration
  132 # http://django-allauth.readthedocs.io/en/latest/configuration.html
  133 ACCOUNT_EMAIL_REQUIRED = True
  134 ACCOUNT_EMAIL_VERIFICATION = "mandatory"
  135 ACCOUNT_LOGOUT_ON_GET = True
  136 ACCOUNT_LOGOUT_REDIRECT_URL = 'home'
  137 ACCOUNT_SESSION_REMEMBER = True
  138 ACCOUNT_SIGNUP_FORM_CLASS = \
  139     'nextcloudappstore.core.user.forms.SignupFormRecaptcha'
  140 
  141 # Internationalization
  142 # https://docs.djangoproject.com/en/1.9/topics/i18n/
  143 LANGUAGE_CODE = 'en-us'
  144 TIME_ZONE = 'UTC'
  145 USE_I18N = True
  146 USE_L10N = True
  147 USE_TZ = True
  148 
  149 PARLER_LANGUAGES = {
  150     1: (
  151         {'code': 'en'},
  152         {'code': 'de'},
  153         {'code': 'fr'},
  154     ),
  155     'default': {
  156         'fallbacks': ['en'],
  157         'hide_untranslated': False,
  158     }
  159 }
  160 
  161 # Static files (CSS, JavaScript, Images)
  162 # https://docs.djangoproject.com/en/1.9/howto/static-files/
  163 STATICFILES_DIRS = (
  164     os.path.join(BASE_DIR, 'static'),
  165 )
  166 MEDIA_ROOT = os.path.join(BASE_DIR, 'media')
  167 RELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')
  168 STATIC_URL = '/static/'
  169 MEDIA_URL = '/media/'
  170 
  171 # Default security settings
  172 SECURE_BROWSER_XSS_FILTER = True
  173 SECURE_CONTENT_TYPE_NOSNIFF = True
  174 
  175 # use modern no Captcha reCaptcha
  176 NOCAPTCHA = True
  177 
  178 
  179 LOGIN_REDIRECT_URL = 'home'
  180 
  181 try:
  182     from nextcloudappstore.local_settings import *
  183 except:
  184     pass
  185
  ```
  --- END FILES ---
  
  Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.
  
  Here is an example:
  
  ```diff
  diff --git a/examples/server_async.py b/examples/server_async.py
  --- a/examples/server_async.py
  +++ b/examples/server_async.py
  @@ -313,4 +313,4 @@
   
   
   if __name__ == "__main__":
  -    asyncio.run(run_async_server("."), debug=True)
  +    asyncio.run(run_async_server(), debug=True)
  diff --git a/examples/server_sync.py b/examples/server_sync.py
  --- a/examples/server_sync.py
  +++ b/examples/server_sync.py
  @@ -313,5 +313,5 @@
   
   
   if __name__ == "__main__":
  -    server = run_sync_server(".")
  +    server = run_sync_server()
       server.shutdown()
  
  ```
  
golden_diff: diff --git a/nextcloudappstore/settings.py b/nextcloudappstore/settings.py
  --- a/nextcloudappstore/settings.py
  +++ b/nextcloudappstore/settings.py
  @@ -21,28 +21,29 @@
   # Application definition
   
   INSTALLED_APPS = [
  +    'nextcloudappstore.core.apps.CoreConfig',
       'parler',
  +    'captcha',
       'rest_framework',
  +    'corsheaders',
  +    'allauth',
  +    'allauth.account',
  +    'allauth.socialaccount',
  +    'allauth.socialaccount.providers.github',
  +    'allauth.socialaccount.providers.bitbucket',
       'django.contrib.admin',
       'django.contrib.auth',
       'django.contrib.contenttypes',
       'django.contrib.sessions',
       'django.contrib.messages',
  -    # The Django sites framework is required by allauth
       'django.contrib.sites',
       'django.contrib.staticfiles',
  -    'captcha',
  -    'nextcloudappstore.core.apps.CoreConfig',
  -    'allauth',
  -    'allauth.account',
  -    'allauth.socialaccount',
  -    'allauth.socialaccount.providers.github',
  -    'allauth.socialaccount.providers.bitbucket',
   ]
   
   MIDDLEWARE_CLASSES = [
       'django.middleware.security.SecurityMiddleware',
       'django.contrib.sessions.middleware.SessionMiddleware',
  +    'corsheaders.middleware.CorsMiddleware',
       'django.middleware.common.CommonMiddleware',
       'django.middleware.csrf.CsrfViewMiddleware',
       'django.contrib.auth.middleware.AuthenticationMiddleware',
  @@ -171,6 +172,22 @@
   # Default security settings
   SECURE_BROWSER_XSS_FILTER = True
   SECURE_CONTENT_TYPE_NOSNIFF = True
  +CORS_ORIGIN_ALLOW_ALL = True
  +CORS_URLS_REGEX = r'^/api/.*$'
  +CORS_ALLOW_HEADERS = (
  +    'x-requested-with',
  +    'content-type',
  +    'accept',
  +    'origin',
  +    'authorization',
  +    'x-csrftoken',
  +    'if-none-match',
  +)
  +CORS_EXPOSE_HEADERS = (
  +    'etag',
  +    'x-content-type-options',
  +    'content-type',
  +)
   
   # use modern no Captcha reCaptcha
   NOCAPTCHA = True
  
verification_info: {"golden_diff": "diff --git a/nextcloudappstore/settings.py b/nextcloudappstore/settings.py\n--- a/nextcloudappstore/settings.py\n+++ b/nextcloudappstore/settings.py\n@@ -21,28 +21,29 @@\n # Application definition\n \n INSTALLED_APPS = [\n+    'nextcloudappstore.core.apps.CoreConfig',\n     'parler',\n+    'captcha',\n     'rest_framework',\n+    'corsheaders',\n+    'allauth',\n+    'allauth.account',\n+    'allauth.socialaccount',\n+    'allauth.socialaccount.providers.github',\n+    'allauth.socialaccount.providers.bitbucket',\n     'django.contrib.admin',\n     'django.contrib.auth',\n     'django.contrib.contenttypes',\n     'django.contrib.sessions',\n     'django.contrib.messages',\n-    # The Django sites framework is required by allauth\n     'django.contrib.sites',\n     'django.contrib.staticfiles',\n-    'captcha',\n-    'nextcloudappstore.core.apps.CoreConfig',\n-    'allauth',\n-    'allauth.account',\n-    'allauth.socialaccount',\n-    'allauth.socialaccount.providers.github',\n-    'allauth.socialaccount.providers.bitbucket',\n ]\n \n MIDDLEWARE_CLASSES = [\n     'django.middleware.security.SecurityMiddleware',\n     'django.contrib.sessions.middleware.SessionMiddleware',\n+    'corsheaders.middleware.CorsMiddleware',\n     'django.middleware.common.CommonMiddleware',\n     'django.middleware.csrf.CsrfViewMiddleware',\n     'django.contrib.auth.middleware.AuthenticationMiddleware',\n@@ -171,6 +172,22 @@\n # Default security settings\n SECURE_BROWSER_XSS_FILTER = True\n SECURE_CONTENT_TYPE_NOSNIFF = True\n+CORS_ORIGIN_ALLOW_ALL = True\n+CORS_URLS_REGEX = r'^/api/.*$'\n+CORS_ALLOW_HEADERS = (\n+    'x-requested-with',\n+    'content-type',\n+    'accept',\n+    'origin',\n+    'authorization',\n+    'x-csrftoken',\n+    'if-none-match',\n+)\n+CORS_EXPOSE_HEADERS = (\n+    'etag',\n+    'x-content-type-options',\n+    'content-type',\n+)\n \n # use modern no Captcha reCaptcha\n NOCAPTCHA = True\n", "issue": "API routes should be enabled for CORS\nOnly API routes should be whitelisted for CORS\n\nWe need to make sure that CORS and session auth are mutually exclusive\n\nThe solution is probably to integrate https://github.com/ottoyiu/django-cors-headers/\n\n", "before_files": [{"content": "\"\"\"\nDjango settings for nextcloudappstore project.\n\nGenerated by 'django-admin startproject' using Django 1.9.6.\n\nFor more information on this file, see\nhttps://docs.djangoproject.com/en/1.9/topics/settings/\n\nFor the full list of settings and their values, see\nhttps://docs.djangoproject.com/en/1.9/ref/settings/\n\"\"\"\n\nimport os\n\n# Build paths inside the project like this: os.path.join(BASE_DIR, ...)\nBASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))\n\n# Quick-start development settings - unsuitable for production\n# See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/\n\n# Application definition\n\nINSTALLED_APPS = [\n    'parler',\n    'rest_framework',\n    'django.contrib.admin',\n    'django.contrib.auth',\n    'django.contrib.contenttypes',\n    'django.contrib.sessions',\n    'django.contrib.messages',\n    # The Django sites framework is required by allauth\n    'django.contrib.sites',\n    'django.contrib.staticfiles',\n    'captcha',\n    'nextcloudappstore.core.apps.CoreConfig',\n    'allauth',\n    'allauth.account',\n    'allauth.socialaccount',\n    'allauth.socialaccount.providers.github',\n    'allauth.socialaccount.providers.bitbucket',\n]\n\nMIDDLEWARE_CLASSES = [\n    'django.middleware.security.SecurityMiddleware',\n    'django.contrib.sessions.middleware.SessionMiddleware',\n    'django.middleware.common.CommonMiddleware',\n    'django.middleware.csrf.CsrfViewMiddleware',\n    'django.contrib.auth.middleware.AuthenticationMiddleware',\n    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',\n    'django.contrib.messages.middleware.MessageMiddleware',\n    'django.middleware.clickjacking.XFrameOptionsMiddleware',\n]\n\nROOT_URLCONF = 'nextcloudappstore.urls'\n\nTEMPLATES = [\n    {\n        'BACKEND': 'django.template.backends.django.DjangoTemplates',\n        'DIRS': [],\n        'APP_DIRS': True,\n        'OPTIONS': {\n            'context_processors': [\n                'django.template.context_processors.debug',\n                'django.template.context_processors.request',\n                'django.contrib.auth.context_processors.auth',\n                'django.contrib.messages.context_processors.messages',\n            ],\n        },\n    },\n]\n\nWSGI_APPLICATION = 'nextcloudappstore.wsgi.application'\n\n# Database\n# https://docs.djangoproject.com/en/1.9/ref/settings/#databases\n\nDATABASES = {\n    'default': {\n        'ENGINE': 'django.db.backends.sqlite3',\n        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),\n        'TEST': {\n            'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),\n        }\n    }\n}\n\nAUTHENTICATION_BACKENDS = (\n    # Needed to login by username in Django admin, regardless of `allauth`\n    'django.contrib.auth.backends.ModelBackend',\n\n    # `allauth` specific authentication methods, such as login by e-mail\n    'allauth.account.auth_backends.AuthenticationBackend',\n)\n\n# Password validation\n# https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators\n\nAUTH_PASSWORD_VALIDATORS = [\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.UserAttributeSimilarityValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.MinimumLengthValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.CommonPasswordValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.NumericPasswordValidator',\n    },\n]\n\nREST_FRAMEWORK = {\n    'DEFAULT_RENDERER_CLASSES': (\n        'djangorestframework_camel_case.render.CamelCaseJSONRenderer',\n    ),\n    'DEFAULT_PARSER_CLASSES': (\n        'djangorestframework_camel_case.parser.CamelCaseJSONParser',\n    ),\n    'DEFAULT_THROTTLE_RATES': {\n        'app_upload': '100/day'\n    }\n}\n\nSITE_ID = 1\n\n# Allauth configuration\n# http://django-allauth.readthedocs.io/en/latest/configuration.html\nACCOUNT_EMAIL_REQUIRED = True\nACCOUNT_EMAIL_VERIFICATION = \"mandatory\"\nACCOUNT_LOGOUT_ON_GET = True\nACCOUNT_LOGOUT_REDIRECT_URL = 'home'\nACCOUNT_SESSION_REMEMBER = True\nACCOUNT_SIGNUP_FORM_CLASS = \\\n    'nextcloudappstore.core.user.forms.SignupFormRecaptcha'\n\n# Internationalization\n# https://docs.djangoproject.com/en/1.9/topics/i18n/\nLANGUAGE_CODE = 'en-us'\nTIME_ZONE = 'UTC'\nUSE_I18N = True\nUSE_L10N = True\nUSE_TZ = True\n\nPARLER_LANGUAGES = {\n    1: (\n        {'code': 'en'},\n        {'code': 'de'},\n        {'code': 'fr'},\n    ),\n    'default': {\n        'fallbacks': ['en'],\n        'hide_untranslated': False,\n    }\n}\n\n# Static files (CSS, JavaScript, Images)\n# https://docs.djangoproject.com/en/1.9/howto/static-files/\nSTATICFILES_DIRS = (\n    os.path.join(BASE_DIR, 'static'),\n)\nMEDIA_ROOT = os.path.join(BASE_DIR, 'media')\nRELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')\nSTATIC_URL = '/static/'\nMEDIA_URL = '/media/'\n\n# Default security settings\nSECURE_BROWSER_XSS_FILTER = True\nSECURE_CONTENT_TYPE_NOSNIFF = True\n\n# use modern no Captcha reCaptcha\nNOCAPTCHA = True\n\n\nLOGIN_REDIRECT_URL = 'home'\n\ntry:\n    from nextcloudappstore.local_settings import *\nexcept:\n    pass\n", "path": "nextcloudappstore/settings.py"}], "after_files": [{"content": "\"\"\"\nDjango settings for nextcloudappstore project.\n\nGenerated by 'django-admin startproject' using Django 1.9.6.\n\nFor more information on this file, see\nhttps://docs.djangoproject.com/en/1.9/topics/settings/\n\nFor the full list of settings and their values, see\nhttps://docs.djangoproject.com/en/1.9/ref/settings/\n\"\"\"\n\nimport os\n\n# Build paths inside the project like this: os.path.join(BASE_DIR, ...)\nBASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))\n\n# Quick-start development settings - unsuitable for production\n# See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/\n\n# Application definition\n\nINSTALLED_APPS = [\n    'nextcloudappstore.core.apps.CoreConfig',\n    'parler',\n    'captcha',\n    'rest_framework',\n    'corsheaders',\n    'allauth',\n    'allauth.account',\n    'allauth.socialaccount',\n    'allauth.socialaccount.providers.github',\n    'allauth.socialaccount.providers.bitbucket',\n    'django.contrib.admin',\n    'django.contrib.auth',\n    'django.contrib.contenttypes',\n    'django.contrib.sessions',\n    'django.contrib.messages',\n    'django.contrib.sites',\n    'django.contrib.staticfiles',\n]\n\nMIDDLEWARE_CLASSES = [\n    'django.middleware.security.SecurityMiddleware',\n    'django.contrib.sessions.middleware.SessionMiddleware',\n    'corsheaders.middleware.CorsMiddleware',\n    'django.middleware.common.CommonMiddleware',\n    'django.middleware.csrf.CsrfViewMiddleware',\n    'django.contrib.auth.middleware.AuthenticationMiddleware',\n    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',\n    'django.contrib.messages.middleware.MessageMiddleware',\n    'django.middleware.clickjacking.XFrameOptionsMiddleware',\n]\n\nROOT_URLCONF = 'nextcloudappstore.urls'\n\nTEMPLATES = [\n    {\n        'BACKEND': 'django.template.backends.django.DjangoTemplates',\n        'DIRS': [],\n        'APP_DIRS': True,\n        'OPTIONS': {\n            'context_processors': [\n                'django.template.context_processors.debug',\n                'django.template.context_processors.request',\n                'django.contrib.auth.context_processors.auth',\n                'django.contrib.messages.context_processors.messages',\n            ],\n        },\n    },\n]\n\nWSGI_APPLICATION = 'nextcloudappstore.wsgi.application'\n\n# Database\n# https://docs.djangoproject.com/en/1.9/ref/settings/#databases\n\nDATABASES = {\n    'default': {\n        'ENGINE': 'django.db.backends.sqlite3',\n        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),\n        'TEST': {\n            'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),\n        }\n    }\n}\n\nAUTHENTICATION_BACKENDS = (\n    # Needed to login by username in Django admin, regardless of `allauth`\n    'django.contrib.auth.backends.ModelBackend',\n\n    # `allauth` specific authentication methods, such as login by e-mail\n    'allauth.account.auth_backends.AuthenticationBackend',\n)\n\n# Password validation\n# https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators\n\nAUTH_PASSWORD_VALIDATORS = [\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.UserAttributeSimilarityValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.MinimumLengthValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.CommonPasswordValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.NumericPasswordValidator',\n    },\n]\n\nREST_FRAMEWORK = {\n    'DEFAULT_RENDERER_CLASSES': (\n        'djangorestframework_camel_case.render.CamelCaseJSONRenderer',\n    ),\n    'DEFAULT_PARSER_CLASSES': (\n        'djangorestframework_camel_case.parser.CamelCaseJSONParser',\n    ),\n    'DEFAULT_THROTTLE_RATES': {\n        'app_upload': '100/day'\n    }\n}\n\nSITE_ID = 1\n\n# Allauth configuration\n# http://django-allauth.readthedocs.io/en/latest/configuration.html\nACCOUNT_EMAIL_REQUIRED = True\nACCOUNT_EMAIL_VERIFICATION = \"mandatory\"\nACCOUNT_LOGOUT_ON_GET = True\nACCOUNT_LOGOUT_REDIRECT_URL = 'home'\nACCOUNT_SESSION_REMEMBER = True\nACCOUNT_SIGNUP_FORM_CLASS = \\\n    'nextcloudappstore.core.user.forms.SignupFormRecaptcha'\n\n# Internationalization\n# https://docs.djangoproject.com/en/1.9/topics/i18n/\nLANGUAGE_CODE = 'en-us'\nTIME_ZONE = 'UTC'\nUSE_I18N = True\nUSE_L10N = True\nUSE_TZ = True\n\nPARLER_LANGUAGES = {\n    1: (\n        {'code': 'en'},\n        {'code': 'de'},\n        {'code': 'fr'},\n    ),\n    'default': {\n        'fallbacks': ['en'],\n        'hide_untranslated': False,\n    }\n}\n\n# Static files (CSS, JavaScript, Images)\n# https://docs.djangoproject.com/en/1.9/howto/static-files/\nSTATICFILES_DIRS = (\n    os.path.join(BASE_DIR, 'static'),\n)\nMEDIA_ROOT = os.path.join(BASE_DIR, 'media')\nRELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')\nSTATIC_URL = '/static/'\nMEDIA_URL = '/media/'\n\n# Default security settings\nSECURE_BROWSER_XSS_FILTER = True\nSECURE_CONTENT_TYPE_NOSNIFF = True\nCORS_ORIGIN_ALLOW_ALL = True\nCORS_URLS_REGEX = r'^/api/.*$'\nCORS_ALLOW_HEADERS = (\n    'x-requested-with',\n    'content-type',\n    'accept',\n    'origin',\n    'authorization',\n    'x-csrftoken',\n    'if-none-match',\n)\nCORS_EXPOSE_HEADERS = (\n    'etag',\n    'x-content-type-options',\n    'content-type',\n)\n\n# use modern no Captcha reCaptcha\nNOCAPTCHA = True\n\n\nLOGIN_REDIRECT_URL = 'home'\n\ntry:\n    from nextcloudappstore.local_settings import *\nexcept:\n    pass\n", "path": "nextcloudappstore/settings.py"}]}