It is not up to the generic api to decide on CSRF policy. This must be left to client applications
authorymh <ymh.work@gmail.com>
Thu, 07 Apr 2016 13:14:36 +0200
changeset 602 fa80b0104695
parent 601 5b3b5835338a
child 603 d8abed25f44a
It is not up to the generic api to decide on CSRF policy. This must be left to client applications
server/python/django2/renkanmanager/api/views.py
--- a/server/python/django2/renkanmanager/api/views.py	Tue Apr 05 18:32:47 2016 +0200
+++ b/server/python/django2/renkanmanager/api/views.py	Thu Apr 07 13:14:36 2016 +0200
@@ -20,7 +20,6 @@
                                       CanEditWorkspace, CanDeleteWorkspace, CanCreateWorkspace, \
                                       CanDeleteRevision
 from renkanmanager.serializers import RenkanSerializer, RevisionSerializer, WorkspaceSerializer
-from renkanmanager.auth import CsrfExemptSessionAuthentication
 from rest_framework import permissions, status
 from rest_framework.response import Response
 from rest_framework.views import APIView
@@ -87,7 +86,6 @@
         CanEditRenkan,
         CanDeleteRenkan,
     )
-    authentication_classes = tuple(APIView.authentication_classes) + (CsrfExemptSessionAuthentication,)
 
     @csrf_exempt
     def dispatch(self, *args, **kwargs):