You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Now that edxapp has been updated to Django 4.2, devstack.py (for both lms and cms) needs CSRF_TRUSTED_ORIGINS to list out all of the MFE origins, e.g. http://localhost:2000. Otherwise, we get errors like this one:
403 Forbidden
CSRF verification failed. Request aborted.
Origin checking failed - http://localhost/:{your MFE / service port} does not match any trusted origins.
(This may affect other IDAs as well.)
The text was updated successfully, but these errors were encountered:
With the Django 4.2 upgrade, devstack needs `CSRF_TRUSTED_ORIGINS` for MFEs
to work. This PR is probably not a complete list, but gets us started.
Ticket: #34180
With the Django 4.2 upgrade, devstack needs `CSRF_TRUSTED_ORIGINS` for MFEs
to work. This PR is probably not a complete list, but gets us started.
Ticket: #34180
A/C:
{lms,cms}/envs/devstack.py
to includeCSRF_TRUSTED_ORIGINS
with a list of relevant MFEs (including protocol and port)Now that edxapp has been updated to Django 4.2, devstack.py (for both lms and cms) needs
CSRF_TRUSTED_ORIGINS
to list out all of the MFE origins, e.g.http://localhost:2000
. Otherwise, we get errors like this one:(This may affect other IDAs as well.)
The text was updated successfully, but these errors were encountered: