Skip to content

CSRF trusted origins + SLA pause/recompute + issue infra (2026.2.1) - #4

Merged
ConnorHaggerty merged 4 commits into
mainfrom
fix/2026.2.1-csrf-sla-issue-infra
Jul 23, 2026
Merged

CSRF trusted origins + SLA pause/recompute + issue infra (2026.2.1)#4
ConnorHaggerty merged 4 commits into
mainfrom
fix/2026.2.1-csrf-sla-issue-infra

Conversation

@ConnorHaggerty

Copy link
Copy Markdown
Contributor

Fixes #2 and #3.

  • Read CSRF_TRUSTED_ORIGINS from the environment so proxy/external-hostname logins stop hitting 'Origin checking failed'.
  • Pause the SLA clock on Pending, recompute due dates on priority change, and stop check_sla breaching paused tickets.
  • Add issue templates + community health files.

Tests: USE_SQLITE=1 .venv/bin/python manage.py test (127 passing). Tag v2026.2.1 after merge

Django rejected logins with 'Origin checking failed' when Jackil was reached
through a reverse proxy or an external hostname because no trusted origins were
configured.
Add an env-driven CSRF_TRUSTED_ORIGINS setting and document it for proxy
deployments alongside ALLOWED_HOSTS.
The time-sensitivity timer kept running while a ticket sat in Pending and never
recalculated when the priority changed, so escalations used stale deadlines.
Freeze the clock while a ticket is in a paused status and shift the due dates
forward by the paused span when it resumes, banking the time so later
recalculations stay correct.
Recompute first_response_due and resolution_due against the new target whenever
the priority changes.
Stop check_sla from breaching Pending tickets.
Bring the bug report, feature request, config, pull request template,
contributing guide, and security policy in line with the other SQSY repos,
adapted to Jackil's helpdesk domain.
@ConnorHaggerty ConnorHaggerty self-assigned this Jul 23, 2026
The Civil SSO app predated the ruff format/lint gate. Reformat it, add a
__str__ to CachedCivilKey, order the model magic methods per DJ012, and drop an
unused import so the format and lint checks pass.
@ConnorHaggerty
ConnorHaggerty merged commit e6e55af into main Jul 23, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CSRF_TRUSTED_ORIGINS

1 participant