From da9bb2b79d47c17482f53c5adaf09536d50bbdaa Mon Sep 17 00:00:00 2001
From: caoqianming <caoqianming@foxmail.com>
Date: Fri, 11 Feb 2022 11:20:44 +0800
Subject: [PATCH] =?UTF-8?q?settings=E5=90=8C=E6=BA=90=E7=AD=96=E7=95=A5?=
 =?UTF-8?q?=E9=85=8D=E7=BD=AE?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 hb_server/apps/hrm/views.py  | 1 +
 hb_server/server/settings.py | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/hb_server/apps/hrm/views.py b/hb_server/apps/hrm/views.py
index 5bf9457..ed733da 100644
--- a/hb_server/apps/hrm/views.py
+++ b/hb_server/apps/hrm/views.py
@@ -125,6 +125,7 @@ class FaceLogin(CreateAPIView):
         user, msg = HRMService.face_compare_from_base64(base64_data)
         if user:
             refresh = RefreshToken.for_user(user)
+            # 可设为在岗
             return Response({
                 'refresh': str(refresh),
                 'access': str(refresh.access_token),
diff --git a/hb_server/server/settings.py b/hb_server/server/settings.py
index 1d11566..2890f6b 100644
--- a/hb_server/server/settings.py
+++ b/hb_server/server/settings.py
@@ -63,6 +63,8 @@ INSTALLED_APPS = [
     'apps.develop'
 ]
 
+X_FRAME_OPTIONS = 'SAMEORIGIN'
+
 MIDDLEWARE = [
     'django.middleware.security.SecurityMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',