artin/API-Manager
1
0
Fork 0
mirror of https://github.com/OpenBankProject/API-Manager.git synced 2026-02-06 09:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix CSRF/CORS

Browse Source
This commit is contained in:
karmaking 2025-01-10 21:54:30 +01:00
parent a1fe695b23
commit 8757ce55b5
2 changed files with 2 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apimanager/apimanager/settings.py
View File

@ -44,7 +44,6 @@ INSTALLED_APPS = [
'django.contrib.sessions',
'django.contrib.messages',
'django.contrib.staticfiles',
#'corsheaders',
'bootstrap',
'bootstrap_datepicker_plus',
'mathfilters',
@ -87,7 +86,6 @@ MIDDLEWARE = [
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
# 'django.middleware.cache.FetchFromCacheMiddleware',
#'corsheaders.middleware.CorsMiddleware'
]
#cache the view page, we set 60s = 1m,
@ -284,7 +282,7 @@ SESSION_COOKIE_AGE = 300
CSRF_COOKIE_HTTPONLY = True
CSRF_COOKIE_SECURE = True
#SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
# SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
# Paths on API_HOST to OAuth
OAUTH_TOKEN_PATH = '/oauth/initiate'

3
requirements.txt
View File

@ -10,5 +10,4 @@ matplotlib
django-bootstrap-datepicker-plus
django-mathfilters
django-bootstrap
django-csp
#django-cors-headers
django-csp