retrieving tokens works

rowsandall_app/settings.py

@@ -97,6 +97,8 @@ AUTHENTICATION_BACKENDS = (
     #'rules.permissions.ObjectPermissionBackend',
 )
 
+CSRF_TRUSTED_ORIGINS = ['https://rowsandall.com', 'https://www.rowsandall.com', 'http://localhost', 'https://dunav.ngrok.io']
+
 MIDDLEWARE = [
     'django.middleware.common.CommonMiddleware',
     'django.middleware.common.BrokenLinkEmailsMiddleware',
@@ -600,9 +602,11 @@ except KeyError:  # pragma: no cover
 try:
     IDOKLAD_CLIENT_ID = CFG['idoklad_client_id']
     IDOKLAD_CLIENT_SECRET = CFG['idoklad_client_secret']
+    IDOKLAD_REDIRECT_URI = CFG['idoklad_redirect_uri'] 
 except KeyError:  # pragma: no cover
     IDOKLAD_CLIENT_ID = ''
     IDOKLAD_CLIENT_SECRET = ''
+    IDOKLAD_REDIRECT_URI = ''
     
 
 # ID obfuscation