#166203947 Block localhosts requests to deployed environments

[Arusey]

What does this PR do?

Blocks localhost requests to deployed environments

Description of Task to be completed?

When a user makes a request to deployed environments using the localhost, they should be blocked from doing so.

How should this be manually tested?

1. Clone the repo: git clone https://github.com/andela/mrm_api.git
2. Setup project according to Readme.md
3. checkout to branch ch-block-localhost-requests-166203947
   
4. Create a simple client to fetch data from your backend server. Find attached the script to do so
   console.log('loading script')

fetch('http://localhost:8000/mrm', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Accept': 'application/json',
  },
  body: JSON.stringify({query: "{allRooms { rooms { name }} }"})
})
  .then(r => r.json())
  .then(data => console.log('data returned:', data))
  .catch(e => console.log('error '+ e));

5. Change the CORS in your app.py to be as below.
   

6. Inspect the changes on your browser.

Pivotal tracker story

#166203947

• My code follows the style guidelines of this project
• I have linted my code prior to submission
• I have made the corresponding changes to the documentation
• My changes generate no new warnings
• New and existing unit tests pass locally with my changes
• Implementation works according to expectations

[rajeman]

@Arusey is there any reason why this dependency was upgraded?

[Arusey]

i figured there might be version problem

…

On Fri, Jun 7, 2019 at 5:48 PM rajeman ***@***.***> wrote: ***@***.**** commented on this pull request. ------------------------------ In requirements.txt <#427 (comment)>: > @@ -4,7 +4,7 @@ blinker==1.4 celery==3.1.17 coverage==4.5.1 Flask==0.12.2 -Flask-Cors==3.0.4 +Flask-Cors==3.0.7 @Arusey <https://github.com/Arusey> is there any reason why this dependency was upgraded? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#427?email_source=notifications&email_token=AG3ODQVXCCRTJXPHKX57PULPZJYKTA5CNFSM4HU5EQ72YY3PNVWWK3TUL52HS4DFWFIHK3DMKJSXC5LFON2FEZLWNFSXPKTDN5WW2ZLOORPWSZGOB25QW5Y#pullrequestreview-247139191>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AG3ODQQ4NKEOOWJEFP5DUYDPZJYKTANCNFSM4HU5EQ7Q> .

[mnswaleh]

Kindly include a link to the PT Board story

[mnswaleh]

Nice job @Arusey. Both the localhost, postman and insomnia requests are blocked

[mnswaleh]

consider placing the docstrings in """triple double quotes"""

[Arusey]

noted