Merge pull request 'config: add CSRF trusted origins for production domains' (#37) from feature/meetings into main

Reviewed-on: https://gitea.blackbusinesslabs.com/ATTUNE-HEART-THERAPY/alternative-backend-service/pulls/37
This commit is contained in:
Saani 2025-11-25 18:28:53 +00:00
commit 1a84b8eb99

View File

@ -14,6 +14,7 @@ DEBUG = os.getenv('DEBUG', 'False').lower() == 'true'
ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS', '*').split(',')
# CORS Configuration
CORS_ALLOWED_ORIGINS = [
'http://localhost:3000',
'http://127.0.0.1:3000',
@ -22,6 +23,10 @@ CORS_ALLOWED_ORIGINS = [
CORS_ALLOW_CREDENTIALS = True
CSRF_TRUSTED_ORIGINS = [
'https://api.attunehearttherapy.com',
'https://attunehearttherapy.com'
]
INSTALLED_APPS = [
'jazzmin',