Merge pull request #29 from nens/crsf_tests

new csrf try
nens · Apr 5, 2024 · 00f29b5 · 00f29b5
2 parents 9ef91c9 + 80b0fd8
commit 00f29b5
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/brostar_api/settings.py b/brostar_api/settings.py
@@ -36,11 +36,6 @@
 if not DEBUG:
     ALLOWED_HOSTS = [".brostar.nl"]
 
-CSRF_TRUSTED_ORIGINS = [
-    "http://localhost:4200",
-    "https://staging.brostar.nl",
-]
-
 
 # Application definition
 
@@ -62,6 +57,13 @@
     "encrypted_model_fields",
 ]
 
+CSRF_TRUSTED_ORIGINS = [
+    "http://localhost:4200",
+    "https://staging.brostar.nl",
+    "https://www.staging.brostar.nl",
+]
+
+
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
     "whitenoise.middleware.WhiteNoiseMiddleware",
@@ -128,7 +130,6 @@
 SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
 CORS_ALLOWED_ORIGINS = [
     "http://localhost:4200",
-    "https://staging.brostar.nl",
 ]
 
 # Database