From 9260dd5e3f5767e05dc7b350cf5f398ac51d3ddb Mon Sep 17 00:00:00 2001 From: Usama Sadiq Date: Tue, 3 Dec 2024 17:16:23 +0500 Subject: [PATCH] Revert "chore: Remove CSRF_TRUSTED_ORIGINS_WITH_SCHEMES variable" This reverts commit a0c3b1a82d8c5bc17c1215494550633122cebb36. --- analyticsdataserver/settings/base.py | 1 + analyticsdataserver/settings/production.py | 3 +++ 2 files changed, 4 insertions(+) diff --git a/analyticsdataserver/settings/base.py b/analyticsdataserver/settings/base.py index 947d7d29..d6952bc6 100644 --- a/analyticsdataserver/settings/base.py +++ b/analyticsdataserver/settings/base.py @@ -432,6 +432,7 @@ ########## EDX ENTERPRISE DATA CONFIGURATION API_AUTH_TOKEN = 'put-your-api-token-here' CSRF_COOKIE_SECURE = False +CSRF_TRUSTED_ORIGINS_WITH_SCHEME = [] # just for Django 4.2 upgrade EXTRA_APPS = [] SESSION_EXPIRE_AT_BROWSER_CLOSE = False diff --git a/analyticsdataserver/settings/production.py b/analyticsdataserver/settings/production.py index 3c66c580..f17d4e2d 100644 --- a/analyticsdataserver/settings/production.py +++ b/analyticsdataserver/settings/production.py @@ -53,3 +53,6 @@ def get_env_setting(setting): for override, value in DB_OVERRIDES.items(): DATABASES['default'][override] = value + +if django.VERSION[0] >= 4: # for greater than django 3.2 use schemes. + CSRF_TRUSTED_ORIGINS = CSRF_TRUSTED_ORIGINS_WITH_SCHEME