Merge pull request #108 from seanmorley15/development

Development

backend/server/demo/settings.py

@@ -207,10 +207,8 @@ SWAGGER_SETTINGS = {
 CORS_ORIGIN_ALLOW_ALL = True
 
 
-CSRF_TRUSTED_ORIGINS = [
-    # 'https://api.adventurelog.app',
-    # 'https://adventurelog.app',
-    
-]
+from os import getenv
+
+CSRF_TRUSTED_ORIGINS = getenv('CSRF_TRUSTED_ORIGINS', 'localhost').split(',')
 
 DEFAULT_AUTO_FIELD = 'django.db.models.AutoField'

docker-compose.yml

@@ -35,6 +35,7 @@ services:
       - DJANGO_ADMIN_PASSWORD=admin
       - DJANGO_ADMIN_EMAIL=admin@example.com
       - PUBLIC_URL='http://127.0.0.1:81'
+      - CSRF_TRUSTED_ORIGINS=https://api.adventurelog.app,https://adventurelog.app
       - DEBUG=False
     ports:
       - "8000:8000"