From 9b087730125b38011cabb3c999d28730aea10385 Mon Sep 17 00:00:00 2001
From: Raz <razmig@staxriver.com>
Date: Tue, 4 Feb 2025 19:48:16 +0100
Subject: [PATCH] fix csrf issue

---
 padelclub_backend/settings.py                           | 2 ++
 tournaments/templates/tournaments/acc_active_email.html | 6 +-----
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/padelclub_backend/settings.py b/padelclub_backend/settings.py
index 2c5c17e..6184863 100644
--- a/padelclub_backend/settings.py
+++ b/padelclub_backend/settings.py
@@ -151,5 +151,7 @@ AUTHENTICATION_BACKENDS = [
     'django.contrib.auth.backends.ModelBackend',
 ]
 
+CSRF_COOKIE_SECURE = True  # if using HTTPS
+
 from .settings_local import *
 from .settings_app import *
diff --git a/tournaments/templates/tournaments/acc_active_email.html b/tournaments/templates/tournaments/acc_active_email.html
index 9bb6300..29e0df7 100644
--- a/tournaments/templates/tournaments/acc_active_email.html
+++ b/tournaments/templates/tournaments/acc_active_email.html
@@ -4,11 +4,7 @@
 Bienvenue {{ user.username }} !
 
 <br><br>Veuillez cliquer sur le lien suivant pour activer votre compte :<br>
-<a href="padelclub://{{ domain }}{% url 'activate' uidb64=uid token=token %}">Activer mon compte</a>
-
-<br><br>Si le lien ne marche pas, cliquez <a href="http://{{ domain }}{% url 'activate' uidb64=uid token=token %}?next=index">ici</a>.
-
-<br>Une fois votre compte activé, connectez-vous dans l'app.
+<a href="https://{{ domain }}{% url 'activate' uidb64=uid token=token %}">Activer mon compte</a>
 
 <br><br>À tout de suite sur <a href="https://padelclub.app">Padel Club</a> !
 {% endautoescape %}