ajout du système crsf_token
This commit is contained in:
@@ -1,8 +1,9 @@
|
||||
from django.urls import path
|
||||
from .views import CustomAuthToken, RegenerateTokenView, VerifyTokenView
|
||||
from .views import CustomAuthToken, RegenerateTokenView, VerifyTokenView, get_csrf_token
|
||||
|
||||
urlpatterns = [
|
||||
path('login/', CustomAuthToken.as_view(), name='login'),
|
||||
path('regenerate-token/', RegenerateTokenView.as_view(), name='regenerate-token'),
|
||||
path('verify-token/', VerifyTokenView.as_view(), name='verify-token'),
|
||||
path('get-csrf-token/', get_csrf_token, name='get-csrf-token'),
|
||||
]
|
||||
|
@@ -7,6 +7,12 @@ from .serializers import UserSerializer
|
||||
from rest_framework.permissions import IsAuthenticated
|
||||
from rest_framework import status
|
||||
|
||||
from django.http import JsonResponse
|
||||
from django.middleware.csrf import get_token
|
||||
|
||||
def get_csrf_token(request):
|
||||
return JsonResponse({'csrfToken': get_token(request)})
|
||||
|
||||
class CustomAuthToken(ObtainAuthToken):
|
||||
def post(self, request, *args, **kwargs):
|
||||
response = super().post(request, *args, **kwargs)
|
||||
@@ -34,3 +40,5 @@ class VerifyTokenView(APIView):
|
||||
'username': user.username,
|
||||
'email': user.email
|
||||
}, status=status.HTTP_200_OK)
|
||||
|
||||
|
||||
|
Reference in New Issue
Block a user