me/pi-ku
1
0
Fork 0
mirror of https://github.com/ramvignesh-b/pi-ku.git synced 2026-05-04 08:56:52 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

feat: update CORS and auth cookie configurations

Browse Source
This commit is contained in:
ramvignesh-b
2026-04-22 17:33:02 +05:30
parent cb9d5e35fd
commit 6aff578ca5
1 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/config/settings.py
+10 -5
View File
@@ -26,9 +26,14 @@ if os.path.exists(env_file):
environ.Env.read_env(env_file, overwrite=False) environ.Env.read_env(env_file, overwrite=False)
SSL_ENABLED = env("SSL_ENABLED") == "true" SSL_ENABLED = env("SSL_ENABLED") == "true"
FRONTEND_URL = f"https://{env('FRONTEND_DOMAIN')}" if SSL_ENABLED else f"http://{env('FRONTEND_DOMAIN')}"
FRONTEND_URLS = []
if env("FRONTEND_PORT"): if env("FRONTEND_PORT"):
FRONTEND_URL += f":{env('FRONTEND_PORT')}" FRONTEND_URLS.append(f"http://{env('FRONTEND_DOMAIN')}:{env('FRONTEND_PORT')}")
FRONTEND_URLS.append(f"https://{env('FRONTEND_DOMAIN')}:{env('FRONTEND_PORT')}")
else:
FRONTEND_URLS.append(f"http://{env('FRONTEND_DOMAIN')}")
FRONTEND_URLS.append(f"https://{env('FRONTEND_DOMAIN')}")
# Quick-start development settings - unsuitable for production # Quick-start development settings - unsuitable for production
# See https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/ # See https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/
@@ -86,7 +91,7 @@ DATABASES = {
} }
} }
CORS_ALLOWED_ORIGINS = [FRONTEND_URL] CORS_ALLOWED_ORIGINS = FRONTEND_URLS
CORS_ALLOW_CREDENTIALS = True CORS_ALLOW_CREDENTIALS = True
AUTH_USER_MODEL = "users.User" AUTH_USER_MODEL = "users.User"
@@ -110,8 +115,8 @@ NOTE: COOKIE_SAMESITE: Lax is used to allow cross-site redirection, like links
""" """
AUTH_COOKIE = { AUTH_COOKIE = {
"NAME": "refresh_token", "NAME": "refresh_token",
"DOMAIN": None, "DOMAIN": None if DEBUG else env("FRONTEND_DOMAIN"),
"SECURE": SSL_ENABLED, "SECURE": SSL_ENABLED if DEBUG else True,
"HTTPONLY": True, "HTTPONLY": True,
"SAMESITE": "Lax", "SAMESITE": "Lax",
} }