artin/API-Manager
1
0
Fork 0
mirror of https://github.com/OpenBankProject/API-Manager.git synced 2026-02-06 09:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

CSRF/CORS WIP

Browse Source
This commit is contained in:
karmaking 2025-01-10 21:47:58 +01:00
parent c21fe5d9ab
commit a1fe695b23
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apimanager/apimanager/settings.py
View File

@ -44,7 +44,7 @@ INSTALLED_APPS = [
'django.contrib.sessions',
'django.contrib.messages',
'django.contrib.staticfiles',
'corsheaders',
#'corsheaders',
'bootstrap',
'bootstrap_datepicker_plus',
'mathfilters',
@ -87,7 +87,7 @@ MIDDLEWARE = [
'django.contrib.messages.middleware.MessageMiddleware',
'django.middleware.clickjacking.XFrameOptionsMiddleware',
# 'django.middleware.cache.FetchFromCacheMiddleware',
'corsheaders.middleware.CorsMiddleware'
#'corsheaders.middleware.CorsMiddleware'
]
#cache the view page, we set 60s = 1m,
@ -284,7 +284,7 @@ SESSION_COOKIE_AGE = 300
CSRF_COOKIE_HTTPONLY = True
CSRF_COOKIE_SECURE = True
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
#SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
# Paths on API_HOST to OAuth
OAUTH_TOKEN_PATH = '/oauth/initiate'

2
requirements.txt
View File

@ -11,4 +11,4 @@ django-bootstrap-datepicker-plus
django-mathfilters
django-bootstrap
django-csp
django-cors-headers
#django-cors-headers