Merge pull request #121 from edx/analytics-api-add-trusted-origins

build: include default CSRF_TRUSTED_ORIGINS in analytics-api service
edx · Dec 3, 2024 · f83a562 · f83a562
2 parents 4f6ee9a + 1c62570
commit f83a562
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/playbooks/roles/analytics_api/defaults/main.yml b/playbooks/roles/analytics_api/defaults/main.yml
@@ -148,6 +148,7 @@ ANALYTICS_API_CSRF_COOKIE_SECURE: false
 ANALYTICS_API_ALLOW_CORS_HEADERS: true
 ANALYTICS_API_ALLOW_CORS_CREDENTIALS: true
 ANALYTICS_API_CORS_ORIGIN_WHITELIST: []
+ANALYTICS_API_CSRF_TRUSTED_ORIGINS: []
 ANALYTICS_API_BASIC_AUTH_EXEMPTED_PATHS:
   - 'enterprise'
 
@@ -175,6 +176,7 @@ analytics_api_service_config_overrides:
   AGGREGATE_PAGE_SIZE: '{{ ANALYTICS_API_AGGREGATE_PAGE_SIZE }}'
   REPORT_DOWNLOAD_BACKEND: '{{ ANALYTICS_API_REPORT_DOWNLOAD_BACKEND }}'
   CSRF_COOKIE_SECURE: "{{ ANALYTICS_API_CSRF_COOKIE_SECURE }}"
+  CSRF_TRUSTED_ORIGINS: "{{ ANALYTICS_API_CSRF_TRUSTED_ORIGINS }}"
 
 # Default dummy user, override this!!
 ANALYTICS_API_USERS: