Whitelist localhost from CSRF

pennlabs · Feb 21, 2024 · 36bb1f8 · 36bb1f8
1 parent 8160776
commit 36bb1f8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/backend/pennclubs/settings/development.py b/backend/pennclubs/settings/development.py
@@ -4,6 +4,9 @@
 from pennclubs.settings.base import INSTALLED_APPS, MIDDLEWARE
 
 
+# Enable debug mode
+DEBUG = True
+
 # Development extensions
 INSTALLED_APPS += ["django_extensions", "debug_toolbar"]
 
@@ -13,6 +16,9 @@
 # Allow http callback for DLA
 os.environ["OAUTHLIB_INSECURE_TRANSPORT"] = "1"
 
+# Allow requests from frontend
+CSRF_TRUSTED_ORIGINS = ["http://localhost:3000"]
+
 # Use console email backend during development
 EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend"