restrict_method.py

def OriginRestrictor(get_response):
    def middleware(request):
        forbid = False
        for method in ['CONNECT', 'DELETE', 'GET', 'HEAD', 'OPTIONS', 'POST', 'PUT']:
            if request.method==method and method in method_remote.keys():
                allowed_origin = method_remote[method]
                request_origin = request.META['REMOTE_ADDR']

                if request_origin not in allowed_origin:
                    forbid=True
                    break
        if forbid==True:
            return HttpResponseForbidden()
        
        response = get_response(request)
        return response
return middleware