diff --git a/authapp/urls.py b/authapp/urls.py index 930191a..46e422a 100644 --- a/authapp/urls.py +++ b/authapp/urls.py @@ -1,8 +1,9 @@ from django.urls import path -from .views import CustomAuthToken, RegenerateTokenView, VerifyTokenView +from .views import CustomAuthToken, RegenerateTokenView, VerifyTokenView, get_csrf_token urlpatterns = [ path('login/', CustomAuthToken.as_view(), name='login'), path('regenerate-token/', RegenerateTokenView.as_view(), name='regenerate-token'), path('verify-token/', VerifyTokenView.as_view(), name='verify-token'), + path('get-csrf-token/', get_csrf_token, name='get-csrf-token'), ] diff --git a/authapp/views.py b/authapp/views.py index 9231abe..ea2be97 100644 --- a/authapp/views.py +++ b/authapp/views.py @@ -7,6 +7,12 @@ from .serializers import UserSerializer from rest_framework.permissions import IsAuthenticated from rest_framework import status +from django.http import JsonResponse +from django.middleware.csrf import get_token + +def get_csrf_token(request): + return JsonResponse({'csrfToken': get_token(request)}) + class CustomAuthToken(ObtainAuthToken): def post(self, request, *args, **kwargs): response = super().post(request, *args, **kwargs) @@ -34,3 +40,5 @@ class VerifyTokenView(APIView): 'username': user.username, 'email': user.email }, status=status.HTTP_200_OK) + +