added in secret env var for prod

pages/_document.js

@@ -44,13 +44,12 @@ class MyDocument extends Document {
 
         let csp = ``;
         csp += `base-uri 'self';`;
-        csp += `form-action 'self';`;
+        csp += `form-action 'self' ` + process.env.NEXTAUTH_URL + ` ;`;
         csp += `object-src 'self' data:;`;
-        // csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' ${
-        //     process.env.NODE_ENV != "production" ? " 'unsafe-eval';" : " ;"
-        // }`;
-        csp += `script-src 'self' unsafe-inline https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' 'unsafe-eval';`;
-        //csp += `img-src 'self' https://www.googletagmanager.com https://gov.wales https://www.google-analytics.com 'nonce-${generatedNonce}' data:;`;
+        csp +=
+            `script-src 'self' ` +
+            process.env.NEXTAUTH_URL +
+            ` 'unsafe-inline' https://www.googletagmanager.com  https://maps.googleapis.com 'nonce-${generatedNonce}' 'unsafe-eval';`;
         csp += `style-src 'self' https://fonts.googleapis.com 'unsafe-inline' data:;`;
 
         return (

pages/api/auth/[...nextauth].js

@@ -113,6 +113,7 @@ export default NextAuth({
         }),
     ],
     adapter: PrismaAdapter(prisma),
+    secret: process.env.SECRET,
     session: {
         jwt: true,
         pages: {},