feat: implement secure HTTP-only cookie-based refresh token authentication

2026-05-04 08:56:52 +00:00 · 2026-04-10 17:54:49 +05:30
parent 083936d036
commit 0d37242f0d
3 changed files with 42 additions and 1 deletions
@@ -95,6 +95,7 @@ DATABASES = {
 }

 CORS_ALLOWED_ORIGINS = env.list("CORS_ALLOWED_ORIGINS")
+CORS_ALLOW_CREDENTIALS = True  # allow cookies with frontend

 AUTH_USER_MODEL = "users.User"