Merge pull request #106 from idabblewith/main

Update settings.py
dbca-wa · Jul 26, 2024 · 50ead53 · 50ead53
2 parents 1d9b6c4 + 2b4c8ed
commit 50ead53
Showing 1 changed file with 13 additions and 6 deletions.
diff --git a/config/settings.py b/config/settings.py
@@ -186,14 +186,14 @@
     "DELETE",
 ]
 CORS_ALLOW_HEADERS = [
-    # "X-CSRFToken",
-    # "Content-Type",
     "X-CSRFToken",
     "Content-Type",
-    "Authorization",
-    "X-Requested-With",
-    "Accept",
-    "Origin",
+    # "X-CSRFToken",
+    # "Content-Type",
+    # "Authorization",
+    # "X-Requested-With",
+    # "Accept",
+    # "Origin",
 ]
 
 
@@ -219,6 +219,13 @@
 ]
 CORS_ALLOWED_ORIGINS = list(set(CORS_ALLOWED_ORIGINS))
 
+CSRF_COOKIE_NAME = "csrftoken"
+if DEBUG:
+    CSRF_COOKIE_SECURE = False
+else:
+    CSRF_COOKIE_SECURE = True
+
+
 # print(CORS_ALLOWED_ORIGINS)