mirror of
https://github.com/seanmorley15/AdventureLog.git
synced 2026-03-31 12:44:37 -04:00
chore: Update CORS and CSRF settings for demo purposes
This commit is contained in:
@@ -188,6 +188,17 @@ SWAGGER_SETTINGS = {
|
||||
|
||||
|
||||
# For demo purposes only. Use a white list in the real world.
|
||||
CORS_ORIGIN_ALLOW_ALL = True
|
||||
CORS_ORIGIN_ALLOW_ALL = False
|
||||
|
||||
CORS_ALLOWED_ORIGINS = [
|
||||
'http://localhost:3000',
|
||||
'http://adventurelog.app',
|
||||
'https://api.adventurelog.app',
|
||||
]
|
||||
|
||||
CSRF_TRUSTED_ORIGINS = [
|
||||
'https://api.adventurelog.app',
|
||||
'https://adventurelog.app',
|
||||
]
|
||||
|
||||
DEFAULT_AUTO_FIELD = 'django.db.models.AutoField'
|
||||
|
||||
Reference in New Issue
Block a user