python decorator of cors

cors.py

def cors(func):
    @wraps(func)
    def wrapper_func(*args, **kwargs):
        r = make_response(func(*args, **kwargs))
        # list your access domain here
        # if set 'Access-Control-Allow-Credentials', this cannot be *.
        # must match the require domain
        r.headers['Access-Control-Allow-Origin'] = '*'  
        r.headers['Access-Contorl-Allow-Methods'] = 'GET, POST, PUT, DELETE'  # list your access methods here
        allow_headers = "Referer, Accept, Origin, User-Agent"
        r.headers['Access-Control-Allow-Headers'] = allow_headers
        # if you need the cookie access, uncomment this line
        # r.headers['Access-Control-Allow-Credentials'] = True
        return r

    return wrapper_func