DEV Community

[Comment from a deleted post]
Collapse
 
rhymes profile image
rhymes

I'm not familiar with these tools but I noticed this on the readme of django-cors-headers:

Note: in Django 2.1 the SESSION_COOKIE_SAMESITE setting was added, set to 'Lax' by default, which will prevent Django's session cookie being sent cross-domain. Change it to None to bypass this security restriction.

Could it be that the cookie the server is setting isn't correctly configured for cross domain requests?

See also docs.djangoproject.com/en/2.2/ref/...

Let me know if we are on the right path :)

Collapse
 
thehomelessdev profile image
Santiago Rincón

I already tried that but it didn't work. Someone at StackOverflow told me I needed it to create a token in the Express app and send it with the user data to the Django app. I will try that. I'll let you know.