Added some CSRF settings to make login from a meetecho iframe possible.

- Legacy-Id: 18117
2020-07-01 14:11:09 +00:00 · 2020-07-01 14:11:09 +00:00 · ae5de75b65
parent 92aeb2f6da
commit ae5de75b65
1 changed files with 4 additions and 0 deletions
--- a/ietf/settings.py
+++ b/ietf/settings.py
@ -61,6 +61,10 @@ PASSWORD_HASHERS = [

 ALLOWED_HOSTS = [".ietf.org", ".ietf.org.", "209.208.19.216", "4.31.198.44", "127.0.0.1", "localhost:8000", ]

+X_FRAME_OPTIONS = 'ALLOW-FROM meetecho.com *.meetecho.com *.ietf.org'
+CSRF_TRUSTED_ORIGINS = ['meetecho.com', '*.meetecho.com', '*.ietf.org', ]
+CSRF_COOKIE_SAMESITE = None
+

 # Server name of the tools server
 TOOLS_SERVER = 'tools.' + IETF_DOMAIN