We are currently solving the following issue within our repository. Here is the issue text:
--- BEGIN ISSUE ---
API routes should be enabled for CORS
Only API routes should be whitelisted for CORS

We need to make sure that CORS and session auth are mutually exclusive

The solution is probably to integrate https://github.com/ottoyiu/django-cors-headers/


--- END ISSUE ---

Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
--- BEGIN FILES ---
Path: `nextcloudappstore/settings.py`
Content:
```
1 """
2 Django settings for nextcloudappstore project.
3 
4 Generated by 'django-admin startproject' using Django 1.9.6.
5 
6 For more information on this file, see
7 https://docs.djangoproject.com/en/1.9/topics/settings/
8 
9 For the full list of settings and their values, see
10 https://docs.djangoproject.com/en/1.9/ref/settings/
11 """
12 
13 import os
14 
15 # Build paths inside the project like this: os.path.join(BASE_DIR, ...)
16 BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
17 
18 # Quick-start development settings - unsuitable for production
19 # See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/
20 
21 # Application definition
22 
23 INSTALLED_APPS = [
24     'parler',
25     'rest_framework',
26     'django.contrib.admin',
27     'django.contrib.auth',
28     'django.contrib.contenttypes',
29     'django.contrib.sessions',
30     'django.contrib.messages',
31     # The Django sites framework is required by allauth
32     'django.contrib.sites',
33     'django.contrib.staticfiles',
34     'captcha',
35     'nextcloudappstore.core.apps.CoreConfig',
36     'allauth',
37     'allauth.account',
38     'allauth.socialaccount',
39     'allauth.socialaccount.providers.github',
40     'allauth.socialaccount.providers.bitbucket',
41 ]
42 
43 MIDDLEWARE_CLASSES = [
44     'django.middleware.security.SecurityMiddleware',
45     'django.contrib.sessions.middleware.SessionMiddleware',
46     'django.middleware.common.CommonMiddleware',
47     'django.middleware.csrf.CsrfViewMiddleware',
48     'django.contrib.auth.middleware.AuthenticationMiddleware',
49     'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
50     'django.contrib.messages.middleware.MessageMiddleware',
51     'django.middleware.clickjacking.XFrameOptionsMiddleware',
52 ]
53 
54 ROOT_URLCONF = 'nextcloudappstore.urls'
55 
56 TEMPLATES = [
57     {
58         'BACKEND': 'django.template.backends.django.DjangoTemplates',
59         'DIRS': [],
60         'APP_DIRS': True,
61         'OPTIONS': {
62             'context_processors': [
63                 'django.template.context_processors.debug',
64                 'django.template.context_processors.request',
65                 'django.contrib.auth.context_processors.auth',
66                 'django.contrib.messages.context_processors.messages',
67             ],
68         },
69     },
70 ]
71 
72 WSGI_APPLICATION = 'nextcloudappstore.wsgi.application'
73 
74 # Database
75 # https://docs.djangoproject.com/en/1.9/ref/settings/#databases
76 
77 DATABASES = {
78     'default': {
79         'ENGINE': 'django.db.backends.sqlite3',
80         'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),
81         'TEST': {
82             'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),
83         }
84     }
85 }
86 
87 AUTHENTICATION_BACKENDS = (
88     # Needed to login by username in Django admin, regardless of `allauth`
89     'django.contrib.auth.backends.ModelBackend',
90 
91     # `allauth` specific authentication methods, such as login by e-mail
92     'allauth.account.auth_backends.AuthenticationBackend',
93 )
94 
95 # Password validation
96 # https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators
97 
98 AUTH_PASSWORD_VALIDATORS = [
99     {
100         'NAME': 'django.contrib.auth.password_validation'
101                 '.UserAttributeSimilarityValidator',
102     },
103     {
104         'NAME': 'django.contrib.auth.password_validation'
105                 '.MinimumLengthValidator',
106     },
107     {
108         'NAME': 'django.contrib.auth.password_validation'
109                 '.CommonPasswordValidator',
110     },
111     {
112         'NAME': 'django.contrib.auth.password_validation'
113                 '.NumericPasswordValidator',
114     },
115 ]
116 
117 REST_FRAMEWORK = {
118     'DEFAULT_RENDERER_CLASSES': (
119         'djangorestframework_camel_case.render.CamelCaseJSONRenderer',
120     ),
121     'DEFAULT_PARSER_CLASSES': (
122         'djangorestframework_camel_case.parser.CamelCaseJSONParser',
123     ),
124     'DEFAULT_THROTTLE_RATES': {
125         'app_upload': '100/day'
126     }
127 }
128 
129 SITE_ID = 1
130 
131 # Allauth configuration
132 # http://django-allauth.readthedocs.io/en/latest/configuration.html
133 ACCOUNT_EMAIL_REQUIRED = True
134 ACCOUNT_EMAIL_VERIFICATION = "mandatory"
135 ACCOUNT_LOGOUT_ON_GET = True
136 ACCOUNT_LOGOUT_REDIRECT_URL = 'home'
137 ACCOUNT_SESSION_REMEMBER = True
138 ACCOUNT_SIGNUP_FORM_CLASS = \
139     'nextcloudappstore.core.user.forms.SignupFormRecaptcha'
140 
141 # Internationalization
142 # https://docs.djangoproject.com/en/1.9/topics/i18n/
143 LANGUAGE_CODE = 'en-us'
144 TIME_ZONE = 'UTC'
145 USE_I18N = True
146 USE_L10N = True
147 USE_TZ = True
148 
149 PARLER_LANGUAGES = {
150     1: (
151         {'code': 'en'},
152         {'code': 'de'},
153         {'code': 'fr'},
154     ),
155     'default': {
156         'fallbacks': ['en'],
157         'hide_untranslated': False,
158     }
159 }
160 
161 # Static files (CSS, JavaScript, Images)
162 # https://docs.djangoproject.com/en/1.9/howto/static-files/
163 STATICFILES_DIRS = (
164     os.path.join(BASE_DIR, 'static'),
165 )
166 MEDIA_ROOT = os.path.join(BASE_DIR, 'media')
167 RELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')
168 STATIC_URL = '/static/'
169 MEDIA_URL = '/media/'
170 
171 # Default security settings
172 SECURE_BROWSER_XSS_FILTER = True
173 SECURE_CONTENT_TYPE_NOSNIFF = True
174 
175 # use modern no Captcha reCaptcha
176 NOCAPTCHA = True
177 
178 
179 LOGIN_REDIRECT_URL = 'home'
180 
181 try:
182     from nextcloudappstore.local_settings import *
183 except:
184     pass
185
```
--- END FILES ---

Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.

Here is an example:

```diff
diff --git a/examples/server_async.py b/examples/server_async.py
--- a/examples/server_async.py
+++ b/examples/server_async.py
@@ -313,4 +313,4 @@
 
 
 if __name__ == "__main__":
-    asyncio.run(run_async_server("."), debug=True)
+    asyncio.run(run_async_server(), debug=True)
diff --git a/examples/server_sync.py b/examples/server_sync.py
--- a/examples/server_sync.py
+++ b/examples/server_sync.py
@@ -313,5 +313,5 @@
 
 
 if __name__ == "__main__":
-    server = run_sync_server(".")
+    server = run_sync_server()
     server.shutdown()

```

diff --git a/nextcloudappstore/settings.py b/nextcloudappstore/settings.py
--- a/nextcloudappstore/settings.py
+++ b/nextcloudappstore/settings.py
@@ -21,28 +21,29 @@
 # Application definition
 
 INSTALLED_APPS = [
+    'nextcloudappstore.core.apps.CoreConfig',
     'parler',
+    'captcha',
     'rest_framework',
+    'corsheaders',
+    'allauth',
+    'allauth.account',
+    'allauth.socialaccount',
+    'allauth.socialaccount.providers.github',
+    'allauth.socialaccount.providers.bitbucket',
     'django.contrib.admin',
     'django.contrib.auth',
     'django.contrib.contenttypes',
     'django.contrib.sessions',
     'django.contrib.messages',
-    # The Django sites framework is required by allauth
     'django.contrib.sites',
     'django.contrib.staticfiles',
-    'captcha',
-    'nextcloudappstore.core.apps.CoreConfig',
-    'allauth',
-    'allauth.account',
-    'allauth.socialaccount',
-    'allauth.socialaccount.providers.github',
-    'allauth.socialaccount.providers.bitbucket',
 ]
 
 MIDDLEWARE_CLASSES = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
+    'corsheaders.middleware.CorsMiddleware',
     'django.middleware.common.CommonMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
@@ -171,6 +172,22 @@
 # Default security settings
 SECURE_BROWSER_XSS_FILTER = True
 SECURE_CONTENT_TYPE_NOSNIFF = True
+CORS_ORIGIN_ALLOW_ALL = True
+CORS_URLS_REGEX = r'^/api/.*$'
+CORS_ALLOW_HEADERS = (
+    'x-requested-with',
+    'content-type',
+    'accept',
+    'origin',
+    'authorization',
+    'x-csrftoken',
+    'if-none-match',
+)
+CORS_EXPOSE_HEADERS = (
+    'etag',
+    'x-content-type-options',
+    'content-type',
+)
 
 # use modern no Captcha reCaptcha
 NOCAPTCHA = True

{"golden_diff": "diff --git a/nextcloudappstore/settings.py b/nextcloudappstore/settings.py\n--- a/nextcloudappstore/settings.py\n+++ b/nextcloudappstore/settings.py\n@@ -21,28 +21,29 @@\n # Application definition\n \n INSTALLED_APPS = [\n+    'nextcloudappstore.core.apps.CoreConfig',\n     'parler',\n+    'captcha',\n     'rest_framework',\n+    'corsheaders',\n+    'allauth',\n+    'allauth.account',\n+    'allauth.socialaccount',\n+    'allauth.socialaccount.providers.github',\n+    'allauth.socialaccount.providers.bitbucket',\n     'django.contrib.admin',\n     'django.contrib.auth',\n     'django.contrib.contenttypes',\n     'django.contrib.sessions',\n     'django.contrib.messages',\n-    # The Django sites framework is required by allauth\n     'django.contrib.sites',\n     'django.contrib.staticfiles',\n-    'captcha',\n-    'nextcloudappstore.core.apps.CoreConfig',\n-    'allauth',\n-    'allauth.account',\n-    'allauth.socialaccount',\n-    'allauth.socialaccount.providers.github',\n-    'allauth.socialaccount.providers.bitbucket',\n ]\n \n MIDDLEWARE_CLASSES = [\n     'django.middleware.security.SecurityMiddleware',\n     'django.contrib.sessions.middleware.SessionMiddleware',\n+    'corsheaders.middleware.CorsMiddleware',\n     'django.middleware.common.CommonMiddleware',\n     'django.middleware.csrf.CsrfViewMiddleware',\n     'django.contrib.auth.middleware.AuthenticationMiddleware',\n@@ -171,6 +172,22 @@\n # Default security settings\n SECURE_BROWSER_XSS_FILTER = True\n SECURE_CONTENT_TYPE_NOSNIFF = True\n+CORS_ORIGIN_ALLOW_ALL = True\n+CORS_URLS_REGEX = r'^/api/.*$'\n+CORS_ALLOW_HEADERS = (\n+    'x-requested-with',\n+    'content-type',\n+    'accept',\n+    'origin',\n+    'authorization',\n+    'x-csrftoken',\n+    'if-none-match',\n+)\n+CORS_EXPOSE_HEADERS = (\n+    'etag',\n+    'x-content-type-options',\n+    'content-type',\n+)\n \n # use modern no Captcha reCaptcha\n NOCAPTCHA = True\n", "issue": "API routes should be enabled for CORS\nOnly API routes should be whitelisted for CORS\n\nWe need to make sure that CORS and session auth are mutually exclusive\n\nThe solution is probably to integrate https://github.com/ottoyiu/django-cors-headers/\n\n", "before_files": [{"content": "\"\"\"\nDjango settings for nextcloudappstore project.\n\nGenerated by 'django-admin startproject' using Django 1.9.6.\n\nFor more information on this file, see\nhttps://docs.djangoproject.com/en/1.9/topics/settings/\n\nFor the full list of settings and their values, see\nhttps://docs.djangoproject.com/en/1.9/ref/settings/\n\"\"\"\n\nimport os\n\n# Build paths inside the project like this: os.path.join(BASE_DIR, ...)\nBASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))\n\n# Quick-start development settings - unsuitable for production\n# See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/\n\n# Application definition\n\nINSTALLED_APPS = [\n    'parler',\n    'rest_framework',\n    'django.contrib.admin',\n    'django.contrib.auth',\n    'django.contrib.contenttypes',\n    'django.contrib.sessions',\n    'django.contrib.messages',\n    # The Django sites framework is required by allauth\n    'django.contrib.sites',\n    'django.contrib.staticfiles',\n    'captcha',\n    'nextcloudappstore.core.apps.CoreConfig',\n    'allauth',\n    'allauth.account',\n    'allauth.socialaccount',\n    'allauth.socialaccount.providers.github',\n    'allauth.socialaccount.providers.bitbucket',\n]\n\nMIDDLEWARE_CLASSES = [\n    'django.middleware.security.SecurityMiddleware',\n    'django.contrib.sessions.middleware.SessionMiddleware',\n    'django.middleware.common.CommonMiddleware',\n    'django.middleware.csrf.CsrfViewMiddleware',\n    'django.contrib.auth.middleware.AuthenticationMiddleware',\n    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',\n    'django.contrib.messages.middleware.MessageMiddleware',\n    'django.middleware.clickjacking.XFrameOptionsMiddleware',\n]\n\nROOT_URLCONF = 'nextcloudappstore.urls'\n\nTEMPLATES = [\n    {\n        'BACKEND': 'django.template.backends.django.DjangoTemplates',\n        'DIRS': [],\n        'APP_DIRS': True,\n        'OPTIONS': {\n            'context_processors': [\n                'django.template.context_processors.debug',\n                'django.template.context_processors.request',\n                'django.contrib.auth.context_processors.auth',\n                'django.contrib.messages.context_processors.messages',\n            ],\n        },\n    },\n]\n\nWSGI_APPLICATION = 'nextcloudappstore.wsgi.application'\n\n# Database\n# https://docs.djangoproject.com/en/1.9/ref/settings/#databases\n\nDATABASES = {\n    'default': {\n        'ENGINE': 'django.db.backends.sqlite3',\n        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),\n        'TEST': {\n            'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),\n        }\n    }\n}\n\nAUTHENTICATION_BACKENDS = (\n    # Needed to login by username in Django admin, regardless of `allauth`\n    'django.contrib.auth.backends.ModelBackend',\n\n    # `allauth` specific authentication methods, such as login by e-mail\n    'allauth.account.auth_backends.AuthenticationBackend',\n)\n\n# Password validation\n# https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators\n\nAUTH_PASSWORD_VALIDATORS = [\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.UserAttributeSimilarityValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.MinimumLengthValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.CommonPasswordValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.NumericPasswordValidator',\n    },\n]\n\nREST_FRAMEWORK = {\n    'DEFAULT_RENDERER_CLASSES': (\n        'djangorestframework_camel_case.render.CamelCaseJSONRenderer',\n    ),\n    'DEFAULT_PARSER_CLASSES': (\n        'djangorestframework_camel_case.parser.CamelCaseJSONParser',\n    ),\n    'DEFAULT_THROTTLE_RATES': {\n        'app_upload': '100/day'\n    }\n}\n\nSITE_ID = 1\n\n# Allauth configuration\n# http://django-allauth.readthedocs.io/en/latest/configuration.html\nACCOUNT_EMAIL_REQUIRED = True\nACCOUNT_EMAIL_VERIFICATION = \"mandatory\"\nACCOUNT_LOGOUT_ON_GET = True\nACCOUNT_LOGOUT_REDIRECT_URL = 'home'\nACCOUNT_SESSION_REMEMBER = True\nACCOUNT_SIGNUP_FORM_CLASS = \\\n    'nextcloudappstore.core.user.forms.SignupFormRecaptcha'\n\n# Internationalization\n# https://docs.djangoproject.com/en/1.9/topics/i18n/\nLANGUAGE_CODE = 'en-us'\nTIME_ZONE = 'UTC'\nUSE_I18N = True\nUSE_L10N = True\nUSE_TZ = True\n\nPARLER_LANGUAGES = {\n    1: (\n        {'code': 'en'},\n        {'code': 'de'},\n        {'code': 'fr'},\n    ),\n    'default': {\n        'fallbacks': ['en'],\n        'hide_untranslated': False,\n    }\n}\n\n# Static files (CSS, JavaScript, Images)\n# https://docs.djangoproject.com/en/1.9/howto/static-files/\nSTATICFILES_DIRS = (\n    os.path.join(BASE_DIR, 'static'),\n)\nMEDIA_ROOT = os.path.join(BASE_DIR, 'media')\nRELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')\nSTATIC_URL = '/static/'\nMEDIA_URL = '/media/'\n\n# Default security settings\nSECURE_BROWSER_XSS_FILTER = True\nSECURE_CONTENT_TYPE_NOSNIFF = True\n\n# use modern no Captcha reCaptcha\nNOCAPTCHA = True\n\n\nLOGIN_REDIRECT_URL = 'home'\n\ntry:\n    from nextcloudappstore.local_settings import *\nexcept:\n    pass\n", "path": "nextcloudappstore/settings.py"}], "after_files": [{"content": "\"\"\"\nDjango settings for nextcloudappstore project.\n\nGenerated by 'django-admin startproject' using Django 1.9.6.\n\nFor more information on this file, see\nhttps://docs.djangoproject.com/en/1.9/topics/settings/\n\nFor the full list of settings and their values, see\nhttps://docs.djangoproject.com/en/1.9/ref/settings/\n\"\"\"\n\nimport os\n\n# Build paths inside the project like this: os.path.join(BASE_DIR, ...)\nBASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))\n\n# Quick-start development settings - unsuitable for production\n# See https://docs.djangoproject.com/en/1.9/howto/deployment/checklist/\n\n# Application definition\n\nINSTALLED_APPS = [\n    'nextcloudappstore.core.apps.CoreConfig',\n    'parler',\n    'captcha',\n    'rest_framework',\n    'corsheaders',\n    'allauth',\n    'allauth.account',\n    'allauth.socialaccount',\n    'allauth.socialaccount.providers.github',\n    'allauth.socialaccount.providers.bitbucket',\n    'django.contrib.admin',\n    'django.contrib.auth',\n    'django.contrib.contenttypes',\n    'django.contrib.sessions',\n    'django.contrib.messages',\n    'django.contrib.sites',\n    'django.contrib.staticfiles',\n]\n\nMIDDLEWARE_CLASSES = [\n    'django.middleware.security.SecurityMiddleware',\n    'django.contrib.sessions.middleware.SessionMiddleware',\n    'corsheaders.middleware.CorsMiddleware',\n    'django.middleware.common.CommonMiddleware',\n    'django.middleware.csrf.CsrfViewMiddleware',\n    'django.contrib.auth.middleware.AuthenticationMiddleware',\n    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',\n    'django.contrib.messages.middleware.MessageMiddleware',\n    'django.middleware.clickjacking.XFrameOptionsMiddleware',\n]\n\nROOT_URLCONF = 'nextcloudappstore.urls'\n\nTEMPLATES = [\n    {\n        'BACKEND': 'django.template.backends.django.DjangoTemplates',\n        'DIRS': [],\n        'APP_DIRS': True,\n        'OPTIONS': {\n            'context_processors': [\n                'django.template.context_processors.debug',\n                'django.template.context_processors.request',\n                'django.contrib.auth.context_processors.auth',\n                'django.contrib.messages.context_processors.messages',\n            ],\n        },\n    },\n]\n\nWSGI_APPLICATION = 'nextcloudappstore.wsgi.application'\n\n# Database\n# https://docs.djangoproject.com/en/1.9/ref/settings/#databases\n\nDATABASES = {\n    'default': {\n        'ENGINE': 'django.db.backends.sqlite3',\n        'NAME': os.path.join(BASE_DIR, 'db.sqlite3'),\n        'TEST': {\n            'NAME': os.path.join(BASE_DIR, 'test.sqlite3'),\n        }\n    }\n}\n\nAUTHENTICATION_BACKENDS = (\n    # Needed to login by username in Django admin, regardless of `allauth`\n    'django.contrib.auth.backends.ModelBackend',\n\n    # `allauth` specific authentication methods, such as login by e-mail\n    'allauth.account.auth_backends.AuthenticationBackend',\n)\n\n# Password validation\n# https://docs.djangoproject.com/en/1.9/ref/settings/#auth-password-validators\n\nAUTH_PASSWORD_VALIDATORS = [\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.UserAttributeSimilarityValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.MinimumLengthValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.CommonPasswordValidator',\n    },\n    {\n        'NAME': 'django.contrib.auth.password_validation'\n                '.NumericPasswordValidator',\n    },\n]\n\nREST_FRAMEWORK = {\n    'DEFAULT_RENDERER_CLASSES': (\n        'djangorestframework_camel_case.render.CamelCaseJSONRenderer',\n    ),\n    'DEFAULT_PARSER_CLASSES': (\n        'djangorestframework_camel_case.parser.CamelCaseJSONParser',\n    ),\n    'DEFAULT_THROTTLE_RATES': {\n        'app_upload': '100/day'\n    }\n}\n\nSITE_ID = 1\n\n# Allauth configuration\n# http://django-allauth.readthedocs.io/en/latest/configuration.html\nACCOUNT_EMAIL_REQUIRED = True\nACCOUNT_EMAIL_VERIFICATION = \"mandatory\"\nACCOUNT_LOGOUT_ON_GET = True\nACCOUNT_LOGOUT_REDIRECT_URL = 'home'\nACCOUNT_SESSION_REMEMBER = True\nACCOUNT_SIGNUP_FORM_CLASS = \\\n    'nextcloudappstore.core.user.forms.SignupFormRecaptcha'\n\n# Internationalization\n# https://docs.djangoproject.com/en/1.9/topics/i18n/\nLANGUAGE_CODE = 'en-us'\nTIME_ZONE = 'UTC'\nUSE_I18N = True\nUSE_L10N = True\nUSE_TZ = True\n\nPARLER_LANGUAGES = {\n    1: (\n        {'code': 'en'},\n        {'code': 'de'},\n        {'code': 'fr'},\n    ),\n    'default': {\n        'fallbacks': ['en'],\n        'hide_untranslated': False,\n    }\n}\n\n# Static files (CSS, JavaScript, Images)\n# https://docs.djangoproject.com/en/1.9/howto/static-files/\nSTATICFILES_DIRS = (\n    os.path.join(BASE_DIR, 'static'),\n)\nMEDIA_ROOT = os.path.join(BASE_DIR, 'media')\nRELEASE_DOWNLOAD_ROOT = os.path.join(MEDIA_ROOT, 'releasetmp')\nSTATIC_URL = '/static/'\nMEDIA_URL = '/media/'\n\n# Default security settings\nSECURE_BROWSER_XSS_FILTER = True\nSECURE_CONTENT_TYPE_NOSNIFF = True\nCORS_ORIGIN_ALLOW_ALL = True\nCORS_URLS_REGEX = r'^/api/.*$'\nCORS_ALLOW_HEADERS = (\n    'x-requested-with',\n    'content-type',\n    'accept',\n    'origin',\n    'authorization',\n    'x-csrftoken',\n    'if-none-match',\n)\nCORS_EXPOSE_HEADERS = (\n    'etag',\n    'x-content-type-options',\n    'content-type',\n)\n\n# use modern no Captcha reCaptcha\nNOCAPTCHA = True\n\n\nLOGIN_REDIRECT_URL = 'home'\n\ntry:\n    from nextcloudappstore.local_settings import *\nexcept:\n    pass\n", "path": "nextcloudappstore/settings.py"}]}