manosim / manosim/django-rest-framework-docs
Live API csrftoken problem
Open
- Dominant language
- Python
- Stars
- 641
- Forks
- 178
- PR merge metrics
- No merged PRs in 30d
Description
Hello again,
How has everyone solved the missing csrftoken problem with the liveapi feature? I had to hack the liveapi client to set the X-CSRFTOKEN header by reading from the cookie. I wonder if it's the library's responsibility to do that?
Contributor guide
Research direction
Start by reviewing the liveapi client and its handling of cookies and the X-CSRFTOKEN header. Reproduce the missing csrftoken problem, then trace whether token handling belongs in the client or elsewhere. Done means the responsibility is decided and the live API behavior is corrected or clearly documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100