prepend of www in URL seems to break auth

arenaxr / arena-account

Django project user account management for the ARENA.

https://docs.arenaxr.org/content/architecture/security.html

BSD 3-Clause "New" or "Revised" License

1 stars 2 forks source link

prepend of www in URL seems to break auth #81

Closed anthonyrowe closed 10 months ago

anthonyrowe commented 10 months ago

Load a full URL like: http://www.arenaxr.org including the www. and then if you go to login or directly to a page it internally has a 400 error. It seems like without the www the same flows / pages are ok.

hi-liang commented 10 months ago

Sounds like ALLOWED_HOSTS issue?

mwfarb commented 10 months ago

Hm, I have questions. I'll check in the morning.

mwfarb commented 10 months ago

For now, we've added redirection from www.arenaxr.org to arenaxr.org in nginx.