update

auth_prj/settings.py

@@ -30,13 +30,14 @@ else:
 # See https://docs.djangoproject.com/en/4.2/howto/deployment/checklist/
 
 # SECURITY WARNING: keep the secret key used in production secret!
-SECRET_KEY = 'django-insecure-*kh6e0376o-0m5n*xz^2a2t^fa^77c1=))f$3egn7!w7axaj-l'
+SECRET_KEY = os.environ.get('SECRET_KEY', 'django-insecure-ec9me^z%x7-2vwee5#qq(kvn@^cs!!22_*f-im(320_k5-=0j5')
 
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = int(os.environ.get('DEBUG', 1))
 
-ALLOWED_HOSTS = ["*"]
+AUTH_VERIFY_URL = os.environ.get('AUTH_VERIFY_URL', 'NONE')
 
+ALLOWED_HOSTS = ["*"]
 
 # Application definition
 
@@ -75,6 +76,8 @@ CORS_ALLOWED_ORIGINS = [
     "http://127.0.0.1:3000",
     "http://192.168.0.100:3000",
     "https://demo.test",
+    "http://demo.test",
+    "https://sample.test",
     "http://sample.test",
 ]