Browse Source

Hue [py3] Fix CsrfViewMiddleware and SAML CORS issue (#2733)

Add following configuration in hue.ini
[[session]]
secure=true
trusted_origins=.cloudera.com
Prakash Ranade 3 năm trước cách đây
mục cha
commit
be1f9068a1
1 tập tin đã thay đổi với 2 bổ sung1 xóa
  1. 2 1
      desktop/core/src/desktop/settings.py

+ 2 - 1
desktop/core/src/desktop/settings.py

@@ -380,7 +380,7 @@ EMAIL_SUBJECT_PREFIX = 'Hue %s - ' % desktop.conf.CLUSTER_ID.get()
 # Permissive CORS for public /api
 INSTALLED_APPS.append('corsheaders')
 MIDDLEWARE.insert(0, 'corsheaders.middleware.CorsMiddleware')
-CORS_URLS_REGEX = r'^/api/.*$'
+CORS_URLS_REGEX = r'^/api/.*$|/saml2/login/'
 CORS_ALLOW_CREDENTIALS = True
 if sys.version_info[0] > 2:
   CORS_ALLOW_ALL_ORIGINS = True
@@ -465,6 +465,7 @@ if desktop.conf.TASK_SERVER.ENABLED.get():
 SESSION_COOKIE_NAME = desktop.conf.SESSION.COOKIE_NAME.get()
 SESSION_COOKIE_AGE = desktop.conf.SESSION.TTL.get()
 SESSION_COOKIE_SECURE = desktop.conf.SESSION.SECURE.get()
+SECURE_REFERRER_POLICY = None
 SESSION_EXPIRE_AT_BROWSER_CLOSE = desktop.conf.SESSION.EXPIRE_AT_BROWSER_CLOSE.get()
 
 # HTTP only