Allow cookies to be included in cross-site HTTP requests. Required to…

… pass CSRF tokens and session information from frontend to backend.
Inter-Actief · Feb 17, 2025 · 3cd3835 · 3cd3835
1 parent 93ebaf4
commit 3cd3835
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/amelie/settings/generic.py b/amelie/settings/generic.py
@@ -388,6 +388,9 @@
 # Also, URL-specific CORS rules are handled by the signal handler in `tools/cors.py`.
 CORS_ALLOWED_ORIGINS = []
 CORS_ALLOW_ALL_ORIGINS = False
+# Cookies are allowed to be included in cross-site HTTP requests.
+# Required to pass CSRF tokens and session information from frontend to backend
+CORS_ALLOW_CREDENTIALS = True
 
 # GraphQL API settings
 GRAPHENE = {