Python Eve：请求的资源上没有“Access-Control-Allow-Origin”

XMLHttpRequest cannot load http://127.0.0.1:5000/user/jay3dec. Request header field Authorization is not allowed by Access-Control-Allow-Headers.

为了纠正上述错误,我将以下内容添加到settings.py中

X_DOMAINS = '*'
X_HEADERS = 'Authorization'

现在,上述错误消失,控制台中显示一个新错误：

XMLHttpRequest cannot load http://127.0.0.1:5000/user/jay3dec. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8000' is therefore not allowed access.

但是我已经在settings.py中添加了X_DOMAINS =’*’.

这是angularjs代码：

$scope.validate = function() {

    var encodedUserNameAndPassword = Base64.encode($scope.username + ':' + $scope.password);

    $http.defaults.headers.put = {
        'Access-Control-Allow-Origin': '*','Access-Control-Allow-Methods': 'GET,POST,PUT,DELETE,OPTIONS','Access-Control-Allow-Headers': '*'
    };
    $http.defaults.headers.common['Authorization'] = 'Basic ' + encodedUserNameAndPassword;

    $http({
        method: 'GET',url: 'http://127.0.0.1:5000/user/jay3dec'
    }).
    success(function(data,status,headers,config) {
        console.log(data);
    }).
    error(function(data,config) {
        alert(data);

    });
}

可以发现任何问题