From 54d37f90b89e83824edf2afc95e69518aa5e3aa3 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 12 Jul 2025 09:01:21 +0530 Subject: [PATCH] Fix Railway login issue - add CSRF trusted origins MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Add Railway domain to CSRF_TRUSTED_ORIGINS automatically - Include https://netcop.up.railway.app for CSRF token validation - Resolves login form submission issues on Railway deployment 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- netcop_hub/settings.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/netcop_hub/settings.py b/netcop_hub/settings.py index 10c097c..2689e48 100644 --- a/netcop_hub/settings.py +++ b/netcop_hub/settings.py @@ -166,6 +166,14 @@ OPENWEATHER_API_KEY = config('OPENWEATHER_API_KEY', default='') # Security settings CSRF_TRUSTED_ORIGINS = [origin.strip() for origin in config('CSRF_TRUSTED_ORIGINS', default='').split(',') if origin.strip()] + +# Add Railway domain if running on Railway +if config('RAILWAY_ENVIRONMENT', default=''): + railway_url = config('RAILWAY_PUBLIC_DOMAIN', default='') + if railway_url: + CSRF_TRUSTED_ORIGINS.append(f'https://{railway_url}') + # Also add common Railway domain pattern + CSRF_TRUSTED_ORIGINS.append('https://netcop.up.railway.app') SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https') # Default primary key field type