use https in prod servers 🧷 (#494)

jacksund · Aug 3, 2023 · e17ece9 · e17ece9
1 parent 11d8597
commit e17ece9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/simmate/configuration/django/settings.py b/src/simmate/configuration/django/settings.py
@@ -533,6 +533,12 @@
 
 # -----------------------------------------------------------------------------
 
+# Many auth endpoints require a https instead of http response:
+#   https://stackoverflow.com/questions/67726070/
+# We only use this in production
+if not DEBUG:
+    ACCOUNT_DEFAULT_HTTP_PROTOCOL = "https"
+
 if REQUIRE_LOGIN:
     MIDDLEWARE.append("simmate.website.require_login.RequireLoginMiddleware")