Re: csrf middleware token from request body

2015-03-14 Thread Richard Jeffries
Hi, Thats pretty much the use case I have (accessing an API with no template). I couldn't get angular to play nice even with the below settings so I'd resorted to POST-ing the token but then I encountered the POST dict being turned into JSON. Appreciate that this short-coming is not django so

csrf middleware token from request body

2015-03-13 Thread Richard Jeffries
Hi, Not sure if this breaks any RFC’s or there’s another valid reason why this doesn’t exist already but I’ve noticed that certain client frameworks (looking at you angular) have a tendency to put POST data in the request body. For example, the following angular code $http( { method: