fixes for csrf

Author: frinzekt

server/api/settings.py

@@ -38,6 +38,11 @@
     else []
 )
 
+CSRF_TRUSTED_ORIGINS = (
+    "http://localhost:3000",
+    "http://127.0.0.1:3000",
+    os.environ.get("FRONTEND_URL"),
+)
 
 # Application definition
 
@@ -70,6 +75,7 @@
 CORS_ALLOWED_ORIGINS = [
     "http://localhost:3000",
     "http://127.0.0.1:3000",
+    os.environ.get("FRONTEND_URL")
 ]
 
 ROOT_URLCONF = "api.urls"