CSRF verification failed. Request aborted.

Sangeeth Sajan 21

I'm getting this error. I tried giving CSRF_TRUSTED_ORIGINS = ['https://site.azurewebsites.net/'], CORS_ALLOWED_ORIGINS = ['https://site.azurewebsites.net/']. But landed on the same issue while submitting the form. ALLOWED_HOSTS =[os.environ['WEBSITE_HOSTNAME']] if 'WEBSITE_HOSTNAME' in os.environ else []
My middleware have
"corsheaders.middleware.CorsMiddleware",
"django.middleware.common.CommonMiddleware" and 'django.middleware.csrf.CsrfViewMiddleware'

VenkateshDodda-MSFT 20,781 Reputation points Microsoft Employee

2022-12-15T10:37:58.897+00:00

@Sangeeth Sajan Thank you for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

Could you please elaborate more on your requirement and also what you are trying to accomplish? Are you following any documentation to implement this CSRF on app service ? if yes. could you please help us in sharing to them for better understanding and to assist you further on this.
Sangeeth Sajan 21 Reputation points

2022-12-15T14:24:16.3+00:00

Hi,
I found the answer.

----------------------------------------

To get the csrf_token working properly we need to add
CSRF_TRUSTED_ORIGINS = ['https://'+ os.environ['WEBSITE_HOSTNAME']]

Hope this might be helpful for others

1 answer

Sangeeth Sajan 21 Reputation points

2022-12-15T14:24:30.553+00:00

Hi,
I found the answer.

To get the csrf_token working properly we need to add
CSRF_TRUSTED_ORIGINS = ['https://'+ os.environ['WEBSITE_HOSTNAME']]

Hope this might be helpful to others
Please sign in to rate this answer.

2 people found this answer helpful.
VenkateshDodda-MSFT 20,781 Reputation points Microsoft Employee

2022-12-19T03:40:03.167+00:00

@Sangeeth Sajan Thanks for sharing the solution for the benefit of community. Glad to hear that our problem has been resolved.

Dehan Meng 0 Reputation points

2023-05-02T02:39:24.7466667+00:00

Hi Sangeeth,

Could you please tell me which file you edited?

BR

Dehan Meng

Nimra Fatima 0 Reputation points

2023-05-15T08:52:31.47+00:00

Hi Sangeeth Sajan,

Can you elaborate what did you do to make that work?

I was trying to implement the same .
My APIs are working if it's an http call and throwing 403 forbidden for https request

Sangeeth Sajan 21 Reputation points

2023-05-25T14:42:36.79+00:00

Hi @Dehan Meng ,
I edited the settings.py file

Sangeeth Sajan 21 Reputation points

2023-05-25T14:46:59.46+00:00

Hi Nimra Fatima,

Sometimes it won't work if the allowed host is not given properly in the settings.py file it should be like this
ALLOWED_HOSTS =[os.environ['WEBSITE_HOSTNAME']] if 'WEBSITE_HOSTNAME' in os.environ else []
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

CSRF verification failed. Request aborted.

1 answer

Your answer