Merge pull request #85 from dailybruin/fix/force-https-on-prod

Hardcode allauth to use https on prod
dailybruin · Apr 22, 2022 · d2760a6 · d2760a6
2 parents a10e1a5 + 9570df0
commit d2760a6
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/kerckhoff/kerckhoff/settings.py b/kerckhoff/kerckhoff/settings.py
@@ -173,6 +173,10 @@
 ACCOUNT_USERNAME_REQUIRED = True
 SITE_ID = 1
 
+if not DEBUG:
+    # Set https as default on production
+    ACCOUNT_DEFAULT_HTTP_PROTOCOL = 'https'
+
 SOCIALACCOUNT_PROVIDERS = {
     'google': {
         'SCOPE': [

diff --git a/requirements.txt b/requirements.txt
@@ -12,7 +12,7 @@ configparser==3.5.0
 coreapi==2.3.3
 coreschema==0.0.4
 defusedxml==0.5.0
-django-allauth==0.38.0
+django-allauth==0.43.0
 django-cors-headers==2.2.0
 django-environ==0.4.4
 django-extensions==1.8.1