CORS_ALLOW_ALL_ORIGINS = True CORS_ALLOW_CREDENTIALS = True CORS_ALLOW_METHODS = [ "DELETE", "GET", "OPTIONS", "PATCH", "POST", "PUT", ] CSRF_TRUSTED_ORIGINS = [ 'https://api.meridynpharma.com', 'https://meridynpharma.com', ]