Disable CSRF on api view method(django rest framework)

Question

I have such api method:

@api_view(['POST'])
@login_required
def get_posts(request):
    # ...

How can I disable CSRF only on this method?

Yannic Hamann · Accepted Answer · 2018-10-01 09:35:50Z

6

For function based views you can usually use the decorator csrf_exempt:

from django.views.decorators.csrf import csrf_exempt
from django.http import HttpResponse

@csrf_exempt
def my_view(request):
    return HttpResponse('Hello world')

Update: There may be an exception for the DRF. Take a look here.

edited Oct 1, 2018 at 9:35

answered Mar 4, 2018 at 16:38

Yannic Hamann

5,2651 gold badge37 silver badges57 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

horbor Over a year ago

Why did you remove @api_view() from your example?

Yannic Hamann Over a year ago

Because api_view is only for DRF. I wanted to explain that the decorator csrf_exempt is not DRF specific. So I updated the answer and linked it to another SO question, which explains another related caveat (authentication) in more detail.

Collectives™ on Stack Overflow

Disable CSRF on api view method(django rest framework)

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related