PyCS/backend/pycs_backend/settings/security.py

import os

from .base import BASE_DIR
from corsheaders.defaults import default_headers
from django.core.management.utils import get_random_secret_key
from pathlib import Path

SECRET_KEY_FILE = Path(os.environ.get("PYCS_SECRET_KEYFILE", BASE_DIR / 'secret.txt'))

if not SECRET_KEY_FILE.exists():
    with open(SECRET_KEY_FILE, "w") as f:
        f.write(get_random_secret_key())

    os.chmod(SECRET_KEY_FILE, 0o600)

SECRET_KEY = open(SECRET_KEY_FILE).read()


# Quick-start development settings - unsuitable for production
# See https://docs.djangoproject.com/en/3.2/howto/deployment/checklist/

ALLOWED_HOSTS = [
    # "https://ammod.inf-cv.uni-jena.de",
    # "https://deimos.inf-cv.uni-jena.de",
    # "http://localhost:5000",
    # "http://localhost:8080",
    # "localhost",
]

CORS_ORIGIN_WHITELIST = (
    'http://localhost:8080',
    'http://127.0.0.1:8080',
)

CORS_ALLOW_HEADERS = list(default_headers) + [
    'contenttype',
]


# Password validation
# https://docs.djangoproject.com/en/3.2/ref/settings/#auth-password-validators

AUTH_PASSWORD_VALIDATORS = [
    {
        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
    },
    {
        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
    },
]


REST_FRAMEWORK = {
    'DEFAULT_AUTHENTICATION_CLASSES': (
        'rest_framework_simplejwt.authentication.JWTAuthentication',
    )
}