Django/JQuery CSRF: 403 Error

myFunction: function() {
  $.ajax({
  type: 'POST',
  data: { 
    'csrfmiddlewaretoken': '{{csrf_token}}'
  }, 
  url: '/myajaxview/',
  async: false
  });
}

This is the snippet of code that I think you are looking for

var csrfToken = $('input[name="csrfmiddlewaretoken"]').val();
$.ajax({
    url: 'blah.com/',
    //snipped for brevity
    csrfmiddlewaretoken: csrfToken,
    success: function(data){ doStuff(); }
});

This is what I use in order to be able to do jquery ajax calls to a django app. Hope it works!

First, did you check if the CSRF code is actually send to the server? If it is, does the server expect the hash to be in the post values, or in the header? Right now you set the request header. If both doesn't solve the issue, verify if the server knows the correct hash. When the client sends the correct hash and the server has NULL as hash, then the validation will fail ofcourse.

I solved the problem by calculating a value for the token whenever the DOM is ready, and AJAX reloads.

The javascript code uses the reload_ajax() function to handle the token, as well as any other things I need to refresh both on the initial page load, and subsequent AJAX calls.

<script type="text/javascript">

function reload_ajax() {
    // Useful on initial page load, and after calling AJAX.
    $("input#token").val("{{ csrf_token }}");
}

$(document).ready(function() {
    $("form#stats").unbind("submit");      // Prevents calling document-ready multiple times
    $("form#stats").submit(function(event) {
        event.preventDefault();
        $.ajax({
            type:"POST",
            url: $(this).attr("action"),
            data: $(this).serialize(),     // Serialize the form
            dataType: "json",
            success: function(response){
                $("#stats_ajax").html(response.html);  // Object to refresh after AJAX 
                reload_ajax();
            }
        });
        return false;
    });

    reload_ajax();
});
</script>

I'm using two HTML files, In main.html, I have the javascript code above, and the following:

<div id="stats_ajax">
    {% include "stats_ajax.html" %}
</div>

In stats_ajax.html, I have the actual form (plus other things I need to refresh)

<form id="stats" action="/main/" method="post">
    <!-- The value will be inserted when the DOM reloads. -->
    <input id="token" type="hidden" name="csrfmiddlewaretoken" value="" />
    <!-- Other input elements -->
    <button type="submit">Submit</button>
</form>

In my views.py file,

# Not all imports may be needed for this example
from django.http import HttpResponse
from django.shortcuts import render, redirect
from django.template.loader import render_to_string
import json

def main(request):
    # This request should only be posting AJAX
    if request.is_ajax():
        data = {}
        data["message"] = "Awesome"
        # This is the template to load on the DOM object to update
        html = render_to_string("stats_ajax.html", data)
        res = {"html": html}
        return HttpResponse(json.dumps(res), mimetype='application/json')

    # Handle GET to this view
    return redirect("/main")

Finally, my urls.py has

# Replace "application_name" with your own value
url(r'^main', 'application_name.views.main'),