How can we validate CSRF-Token with Every POST Request? about django-ninja HOT 3 CLOSED

by default Django Ninja have CSRF off
but if you start using any cookie based authentication it will throw an error
you need to set csrf flag to True:

api = NinjaAPI(csrf=True)

added in v.0.7.0

https://django-ninja.rest-framework.com/tutorial/csrf/

from django-ninja.

Hi @Ammadhashmi

I will keep this open...

The plan is to allow to pass csrf flag either on top NinjaAPI(..., csrf=True) or per operation

from django-ninja.

hi did you try the django way of protecting agains csrf.

since ninja use the same views function as django, does it didn't works when you add django.middleware.csrf.CsrfViewMiddleware in your middleware ?

from django-ninja.