fix: configure secure session cookies and dynamic domain for frontend URL
This commit is contained in:
@@ -128,6 +128,14 @@ USE_L10N = True
|
|||||||
USE_TZ = True
|
USE_TZ = True
|
||||||
|
|
||||||
SESSION_COOKIE_SAMESITE = None
|
SESSION_COOKIE_SAMESITE = None
|
||||||
|
SESSION_COOKIE_SECURE = getenv('FRONTEND_URL', 'http://localhost:3000').startswith('https://')
|
||||||
|
from urllib.parse import urlparse
|
||||||
|
|
||||||
|
frontend_url = getenv('FRONTEND_URL', 'http://localhost:3000')
|
||||||
|
parsed_url = urlparse(frontend_url)
|
||||||
|
domain_parts = parsed_url.hostname.split('.')
|
||||||
|
SESSION_COOKIE_DOMAIN = '.' + '.'.join(domain_parts[-2:]) if len(domain_parts) > 1 else parsed_url.hostname
|
||||||
|
print(SESSION_COOKIE_DOMAIN)
|
||||||
|
|
||||||
# Static files (CSS, JavaScript, Images)
|
# Static files (CSS, JavaScript, Images)
|
||||||
# https://docs.djangoproject.com/en/1.7/howto/static-files/
|
# https://docs.djangoproject.com/en/1.7/howto/static-files/
|
||||||
|
|||||||
Reference in New Issue
Block a user