feat: ENH: List of allowed domains as Value

helxplatform · Apr 24, 2024 · 9585a5c · 9585a5c
1 parent 471f35f
commit 9585a5c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/.env.sample b/.env.sample
@@ -17,4 +17,5 @@ GITHUB_SECRET="<insert>"
 OAUTH_PROVIDERS="github"
 SECRET_KEY="<insert>"
 NAMESPACE="default"
-stdnfsPvc="stdnfs"
+stdnfsPvc="stdnfs"
+CSRF_DOMAINS="https://*.remci.org"
diff --git a/appstore/appstore/settings/base.py b/appstore/appstore/settings/base.py
@@ -344,10 +344,13 @@
     },
 }
 
-CSRF_TRUSTED_ORIGINS = [
-        "https://*.renci.org",
-        "https://*.renci.unc.edu"
-    ]
+CSRF_TRUSTED_ORIGINS = os.environ.get("CSRF_DOMAINS", "").split(",")
+print(CSRF_TRUSTED_ORIGINS)
+if CSRF_TRUSTED_ORIGINS == 0:
+    CSRF_TRUSTED_ORIGINS = [
+            "https://*.renci.org",
+            "https://*.renci.unc.edu"
+        ]
 
 # All debug settings
 if DEBUG and DEV_PHASE in ("local", "stub", "dev"):