Force secure cookies

2020-02-21 22:46:26 +00:00 · 2020-02-21 22:46:26 +00:00 · ed13e203f8
commit ed13e203f8
parent 1abd866252
1 changed files with 2 additions and 0 deletions
--- a/apiserver/apiserver/settings.py
+++ b/apiserver/apiserver/settings.py
@ -50,6 +50,8 @@ if DEBUG:
    ]

 SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True


 # Application definition