Django Csrf Token For Ajax

Question

I have given {% csrf_token %} inside the form. Do I have to give another {% csrf_token %} inside the AJAX $.ajax({ .......... )} ?

Solution 1:

See below for how I changed your code. The csrf_token is assigned to a variable with Django templating. You can produce this variable in any of your Javascript code.

The token is then included in the header

<script>var token = '{{csrf_token}}';

    $("#id_username").change(function () {
      console.log($(this).val());
      var form = $(this).closest("form");
      $.ajax({
        headers: { "X-CSRFToken": token },
        url: form.attr("data-validate-username-url"),
        data: form.serialize(),
        dataType: 'json',
        success: function (data) {
          if (data.is_taken) {
            alert(data.error_message);
          }
        }
      });

    });
  </script>

Solution 2:

The documentation very well explained how to use AJAX https://docs.djangoproject.com/en/2.1/ref/csrf/

Baca Juga

Get this library https://github.com/js-cookie/js-cookie/
Add this var csrftoken = Cookies.get('csrftoken');

The last step is configure ajax setup

functioncsrfSafeMethod(method) {
// these HTTP methods do not require CSRF protectionreturn (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
$.ajaxSetup({
  beforeSend: function(xhr, settings) {
    if (!csrfSafeMethod(settings.type) && !this.crossDomain) {
        xhr.setRequestHeader("X-CSRFToken", csrftoken);
    }
  }
});

Solution 3:

Update to the steps above - as the Django documentation indicates you can use the Javascript Cookie library to do a Cookies.get('csrftoken'). Also, I had to add {% csrf_token %} before the function call. Might be obvious, but I didn't know so providing it here to help others

Python Playground

Django Csrf Token For Ajax

Solution 1:

Solution 2:

Solution 3:

Post a Comment for "Django Csrf Token For Ajax"