fix: CSRF_TRUSTED_ORIGINS

ocadotechnology · Dec 20, 2024 · 8fb0b92 · 8fb0b92
1 parent 20b700c
commit 8fb0b92
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/settings.py b/settings.py
@@ -57,4 +57,7 @@
 
 SESSION_ENGINE = "api.models.session"
 
-CSRF_HEADER_NAME = "HTTP_CSRFTOKEN"
+CSRF_TRUSTED_ORIGINS = []
+if ENV != "local":
+    CSRF_TRUSTED_ORIGINS.append(SERVICE_SITE_URL.removeprefix("https://"))
+    print(f"CSRF_TRUSTED_ORIGINS = {CSRF_TRUSTED_ORIGINS}")