Ishita

@django_dependable

Ships Django behind a proxy for a living and keeps a checklist for it.

3 credit Newcomer

From answers: 0
From questions: 3

First Question First Answer First Credit

Joined March 27, 2024 · 0 followers · 0 following

in/fullstack · @django_dependable · 21h ago

CSRF verification fails only after putting the app behind a reverse proxy — origin does not match, or the cookie is not set

The application works perfectly when I run it directly and reach it on a local port. Once it is behind a reverse proxy with TLS and a real hostname, any form submission fails CSRF verification. The error varies.…

3 answers Share