How can we validate CSRF-Token with Every POST Request?

[Ammadhashmi]

I am trying to Validate the CSRF-Token on every Request Please Guide me how to do that in this API framework

[vitalik]

Hi @Ammadhashmi

I will keep this open...

The plan is to allow to pass csrf flag either on top NinjaAPI(..., csrf=True) or per operation

[JusticeN]

hi did you try the django way of protecting agains csrf.

since ninja use the same views function as django, does it didn't works when you add django.middleware.csrf.CsrfViewMiddleware in your middleware ?

[vitalik]

by default Django Ninja have CSRF off
but if you start using any cookie based authentication it will throw an error
you need to set csrf flag to True:

api = NinjaAPI(csrf=True)

added in v.0.7.0

https://django-ninja.rest-framework.com/tutorial/csrf/