added csrf settings

Somraj-234 · Aug 16, 2024 · bee63dd · bee63dd
1 parent bb31b59
commit bee63dd
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/src/sjhome/settings.py b/src/sjhome/settings.py
@@ -57,6 +57,17 @@
 BASE_URL = config("BASE_URL", default=None)
 # print("DEBUG", DEBUG, type(DEBUG))
 
+CSRF_TRUSTED_ORIGINS = [
+    "https://sass-demo-production.up.railway.app",
+    ".railway.app"
+]
+
+SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+
+CSRF_COOKIE_SECURE = True
+SESSION_COOKIE_SECURE = True
+
+
 ALLOWED_HOSTS = [ 
     "sass-demo-production.up.railway.app",
     ".railway.app" # https://saas.prod.railway.app