🐛 Patch Django 4.0 CSRF Bug

pennlabs · Jan 3, 2024 · 6347145 · 6347145
1 parent 152773b
commit 6347145
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/backend/Platform/settings/base.py b/backend/Platform/settings/base.py
@@ -169,6 +169,12 @@
 # CORS Settings
 
 CORS_ALLOW_ALL_ORIGINS = True
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+
+# CSRF Settings
+# TODO: I (Joy) don't know if this is the fix, or if it's the CORS settings above.
+
+CSRF_TRUSTED_ORIGINS = [ f"https://*.{domain}" for domain in DOMAINS ]
 
 # OAuth2 Settings