CSRF_TRUSTED_ORIGINS = ["djangonews27.fly.dev/", "https://*.djangonews27.fly.com", "https://*.fly.dev/", "https://fly.io/apps/djangonews27/"]
Here you need to add https://djangonews.fly.dev/
this url but you have given the url https://*.djangonews27.fly.com
in CSRF_TRUSTED_ORIGINS
is different.