CSRF verification failed. Request aborted - after update

[pktiuk]

My actions before raising this issue

• Read/searched the docs
• Searched past issues

After recent updates (v2.4.2->2.4.6) everything worked fine, but recently i found a problem when I interacted with admin panel (regular annotation and cvat features worked fine).
I was getting CSRF verification failed. Request aborted

Steps to Reproduce (for bugs)

0. Set hostname: export CVAT_HOST=cvat.example.local
1. Deploy CVAT with docker and HTTPS
   export CVAT_HOST=annotations.wbe.local docker-compose -f ./docker-compose.yml -f ./docker-compose.https.yml up
2. Open admin panel
3. Create new user

Instance deployed on my local machine (no CVAT_HOST) worked fine.

Expected Behaviour

Be able to mark user as active/create user etc.

Current Behaviour

Get error.

Possible Solution

This bug was fixable by adding line CSRF_TRUSTED_ORIGINS = ["https://cvat.example.local"] into file: cvat/settings/base.py
I will soon prepare PR with solution.

Context

Your Environment

• Git hash commit (git log -1): tag v2.4.6
• Docker version docker version (e.g. Docker 17.0.05):
• Are you using Docker Swarm or Kubernetes? No
• Operating System and version (e.g. Linux, Windows, MacOS): Linux
• Code example or link to GitHub repo or gist to reproduce problem:
• Other diagnostic information / logs:

Container logs:

cvat_server   | 2023-06-15 09:17:59,840 DEBG 'uvicorn-1' stderr output:
cvat_server   | [2023-06-15 09:17:59,840] WARNING django.security.csrf: Forbidden (Origin checking failed - https://cvat.example.local does not match any trusted origins.): /admin/auth/user/36/change/
cvat_server   | 
cvat_server   | 2023-06-15 09:17:59,840 DEBG 'uvicorn-1' stderr output:
cvat_server   | WARNING:django.security.csrf:Forbidden (Origin checking failed - https://cvat.example.local does not match any trusted origins.): /admin/auth/user/36/change/

[Zanz2]

Im getting the same issue, but when creating tasks and uploading data (csrf token error)

[pktiuk]

@Zanz2 Fix is already submitted in #6322, but it is waiting for approval.
You can just apply my commit and try rebuild your CVAT to check whether does it fix everything for you.

[pktiuk]

#6322 was closed without merging. This issue won't be fixed for now.