Dit lost het probleem op dat we zogezegd de csrf token niet meegaven …

…aan onze post requests
SELab-2 · Mar 14, 2024 · 7fdf875 · 7fdf875
1 parent d244e99
commit 7fdf875
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/api/middleware.py b/api/middleware.py
@@ -1,5 +1,6 @@
 from django.conf import settings
 from django.shortcuts import redirect
+from rest_framework.authentication import SessionAuthentication
 
 
 class RedirectAnonymousUserMiddleware:
@@ -30,3 +31,10 @@ def __call__(self, request):
             return redirect(settings.LOGIN_URL)
 
         return self.get_response(request)
+
+
+class CsrfExemptSessionAuthentication(SessionAuthentication):
+
+    def enforce_csrf(self, request):
+        return  # To not perform the csrf check previously happening
+
diff --git a/api/settings.py b/api/settings.py
@@ -166,3 +166,10 @@
 
 LOGIN_URL = "django_auth_adfs:login"
 LOGIN_REDIRECT_URL = "/login_redirect"
+
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': [
+        'rest_framework.authentication.BasicAuthentication',
+        'api.middleware.CsrfExemptSessionAuthentication'
+    ]
+}