Allow CORS and CSRF for local and GitHub Pages frontends

satcap_project/settings.py

@@ -96,8 +96,17 @@ DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
 CORS_ALLOW_ALL_ORIGINS = True # For development
 
+CORS_ALLOWED_ORIGINS = [
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "https://marinoatohoun.github.io",
+]
+
 CSRF_TRUSTED_ORIGINS = [
     "https://cosmolabhub-satcap-oceans-docker.hf.space",
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "https://marinoatohoun.github.io",
 ]
 
 MEDIA_URL = '/media/'