CSRF verification failed. Request aborted.

[luigi370]

Hi, right after login I get 403 Forbidden error with message: CSRF verification failed. Request aborted.
Locally works, but pushing to productions using https get this.

[hypy13]

Hi, actually its about django itself.

The 403 "CSRF verification failed" error occurs because your production domain isn't in CSRF_TRUSTED_ORIGINS. Add it to settings.py:

CSRF_TRUSTED_ORIGINS = ['https://your-production-domain.com']

Ensure ALLOWED_HOSTS includes your domain and CSRF_COOKIE_SECURE = True for HTTPS. See: https://forum.djangoproject.com/t/django-csrf-trusted-and-allowed-hosts-issues/23842

[luigi370]

yes! i came back to say was actually my issue, cos i rollback the changes and the issue was already there. Thanks to point it out!