|
92 | 92 | CORS_ALLOW_ALL_ORIGINS = True |
93 | 93 | CORS_ALLOWED_METHODS = ["GET"] |
94 | 94 |
|
95 | | -CSRF_COOKIE_SECURE = config("DJANGO_CSRF_COOKIE_SECURE", cast=bool, default=False) # Only if using HTTPS |
96 | | -CSRF_COOKIE_HTTPONLY = config("DJANGO_CSRF_COOKIE_HTTPONLY", cast=bool, default=False) # Must be False for JavaScript access |
| 95 | +CSRF_COOKIE_SECURE = config( |
| 96 | + "DJANGO_CSRF_COOKIE_SECURE", cast=bool, default=False |
| 97 | +) # Only if using HTTPS |
| 98 | +CSRF_COOKIE_HTTPONLY = config( |
| 99 | + "DJANGO_CSRF_COOKIE_HTTPONLY", cast=bool, default=False |
| 100 | +) # Must be False for JavaScript access |
97 | 101 | CSRF_COOKIE_SAMESITE = config("DJANGO_CSRF_COOKIE_SAMESITE", default="Lax") # or 'Strict' or 'None' |
98 | | -CSRF_TRUSTED_ORIGINS = config("DJANGO_CSRF_TRUSTED_DOMAINS", default="").split(",") # Add your domains |
| 102 | +CSRF_TRUSTED_ORIGINS = config("DJANGO_CSRF_TRUSTED_DOMAINS", default="").split( |
| 103 | + "," |
| 104 | +) # Add your domains |
99 | 105 |
|
100 | 106 | if DEBUG: |
101 | 107 | # in development, allow the frontend app to POST forms to the backend |
|
226 | 232 | "rest_framework.authentication.SessionAuthentication", |
227 | 233 | ], |
228 | 234 | "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema", |
| 235 | + "DEFAULT_RENDERER_CLASSES": ("rest_framework.renderers.JSONRenderer",), |
229 | 236 | } |
230 | 237 |
|
231 | 238 | SPECTACULAR_SETTINGS = { |
|
322 | 329 | "handlers": ["console"], |
323 | 330 | "level": LOG_LEVEL, |
324 | 331 | }, |
325 | | - 'django.security.csrf': { |
326 | | - 'handlers': ['console'], |
327 | | - 'level': LOG_LEVEL, |
328 | | - 'propagate': False |
329 | | - }, |
| 332 | + "django.security.csrf": {"handlers": ["console"], "level": LOG_LEVEL, "propagate": False}, |
330 | 333 | }, |
331 | 334 | } |
332 | 335 |
|
|
0 commit comments