CSRF verification failed. Request aborted.

Question

CSRF verification failed. Request aborted.

Sangeeth Sajan 31

I'm getting this error. I tried giving CSRF_TRUSTED_ORIGINS = ['https://site.azurewebsites.net/'], CORS_ALLOWED_ORIGINS = ['https://site.azurewebsites.net/']. But landed on the same issue while submitting the form. ALLOWED_HOSTS =[os.environ['WEBSITE_HOSTNAME']] if 'WEBSITE_HOSTNAME' in os.environ else []
My middleware have
"corsheaders.middleware.CorsMiddleware",
"django.middleware.common.CommonMiddleware" and 'django.middleware.csrf.CsrfViewMiddleware'

VenkateshDodda-MSFT 25,241 Reputation points Microsoft Employee Moderator

2022-12-15T10:37:58.897+00:00

@Sangeeth Sajan Thank you for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

Could you please elaborate more on your requirement and also what you are trying to accomplish? Are you following any documentation to implement this CSRF on app service ? if yes. could you please help us in sharing to them for better understanding and to assist you further on this.
Sangeeth Sajan 31 Reputation points

2022-12-15T14:24:16.3+00:00

Hi,
I found the answer.

----------------------------------------

To get the csrf_token working properly we need to add
CSRF_TRUSTED_ORIGINS = ['https://'+ os.environ['WEBSITE_HOSTNAME']]

Hope this might be helpful for others

1 answer

Your answer

VenkateshDodda-MSFT 25,241 Reputation points Microsoft Employee Moderator

2022-12-15T10:37:58.897+00:00

@Sangeeth Sajan Thank you for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

Could you please elaborate more on your requirement and also what you are trying to accomplish? Are you following any documentation to implement this CSRF on app service ? if yes. could you please help us in sharing to them for better understanding and to assist you further on this.
Sangeeth Sajan 31 Reputation points

2022-12-15T14:24:16.3+00:00

Hi,
I found the answer.

----------------------------------------

To get the csrf_token working properly we need to add
CSRF_TRUSTED_ORIGINS = ['https://'+ os.environ['WEBSITE_HOSTNAME']]

Hope this might be helpful for others

Answer 1

Sangeeth Sajan 31

Hi,
I found the answer.

To get the csrf_token working properly we need to add
CSRF_TRUSTED_ORIGINS = ['https://'+ os.environ['WEBSITE_HOSTNAME']]

Hope this might be helpful to others

VenkateshDodda-MSFT 25,241 Reputation points Microsoft Employee Moderator

2022-12-19T03:40:03.167+00:00

@Sangeeth Sajan Thanks for sharing the solution for the benefit of community. Glad to hear that our problem has been resolved.
Dehan Meng 0 Reputation points

2023-05-02T02:39:24.7466667+00:00

Hi Sangeeth,

Could you please tell me which file you edited?

BR

Dehan Meng
Nimra Fatima 0 Reputation points

2023-05-15T08:52:31.47+00:00

Hi Sangeeth Sajan,

Can you elaborate what did you do to make that work?

I was trying to implement the same .
My APIs are working if it's an http call and throwing 403 forbidden for https request
Sangeeth Sajan 31 Reputation points

2023-05-25T14:42:36.79+00:00

Hi @Dehan Meng ,
I edited the settings.py file
Sangeeth Sajan 31 Reputation points

2023-05-25T14:46:59.46+00:00

Hi Nimra Fatima,

Sometimes it won't work if the allowed host is not given properly in the settings.py file it should be like this
ALLOWED_HOSTS =[os.environ['WEBSITE_HOSTNAME']] if 'WEBSITE_HOSTNAME' in os.environ else []

Share via

CSRF verification failed. Request aborted.

1 answer

Your answer