Question on passing CSRF tags for Django

[knowsuchagency]

Great project! Django creates a CSRF token that needs to be passed when sending POST requests from the client.

An example of how you might handle this with HTMX would something like the following:

<div class="article-page" hx-headers='{"X-CSRFToken": "{{ csrf_token }}"}'>

Is there a way to do something similar with alpine-ajax?

[imacrayon]

Currently, we don't have an option to set the request headers. I'd recommend a using a form with x-target and a CSRF input: <form method="post" x-target="article">{% csrf_token %}</form>.

I know that option isn't always practical though, so we should probably add a headers option to the $ajax magic. That would let you write an HTMX equivalent that would look something like this:

<div @click='$ajax({
  "headers": { "X-CSRFToken": "{{ csrf_token }}" }
})'>