@csrf_exempt不工作休息api

问题描述：

我想豁免处理REST API POST请求的视图的CSRF验证，但我仍然收到CSRF verification failed错误。@csrf_exempt不工作休息api

我试过this question给出的解决方案，它没有工作。

我的代码：

sendmoney REST API视图：

@api_view(["POST"])                   
@authentication_classes([TokenAuthentication,])            
@permission_classes([IsAuthenticated, ])              
@csrf_exempt                     
def send_money(request):                  
    if request.method == "POST":                
     data = JSONParser().parse(request)             
     success = send_money_api(request, data)            
     if success["status"]:                 
      return Response(status=status.HTTP_202_ACCEPTED)         
     else:                     
      return Response({"error": success["errors"]}, status=status.HTTP_400_BAD_REQUEST)

send_money_api方法：

def send_money_api(request, data): 
    if data["amount"] and data["to"]: 
     wallet = Wallet.objects.get(username=request.user.username) 
     users = User.objects.all() 
     users_names = [] 
     for user in users: 
      users_names.append(user) 
     if int(data["amount"]) > int(wallet.amount): 
      return {"status": False, "errors": "Withdraw amount greater than balance"} 
     elif data["to"] == "ravinkohli" and data["to"] == request.user.username and data["to"] not in users_names: 
      return {"status": False, "errors": "Invalid recipient"} 
     else: 
      wallet.subtract_money(data["amount"]) 
      wallet.save() 
      transaction = Transaction(from_name=request.user.username, wallet_id=wallet, date=datetime.datetime.now(), 
             to=data['to'], amount=data["amount"]) 
      transaction.save() 
      return {"status": True} 
    else: 
     return {"status": False, "errors": "Missing content"}

错误

Forbidden (403) 
CSRF verification failed. Request aborted. 
You are seeing this message because this site requires a CSRF cookie when submitting forms. This cookie is required for security reasons, to ensure that your browser is not being hijacked by third parties. 
If you have configured your browser to disable cookies, please re-enable them, at least for this site, or for 'same-origin' requests.

为什么不在'send_money_api'上的'@ csrf_exempt'呢？ – Jedi

我虽然因为它不是一个视图，但感谢它的工作 –

引用文档：*视图函数，或简称为视图，只是一个Python函数，它接受Web请求并返回响应。 – Jedi

答

对于send_money_api(...)视图，CSRF验证失败。只需在第二个视图上方添加@csrf_exempt修饰器。

@csrf_exempt不工作休息api

相关推荐