Disable Session Authentication for DRF.

inputlogic / django-api-starter

Boilerplate for starting Django DRF / API projects

2 stars 0 forks source link

Disable Session Authentication for DRF. #59

Closed staydecent closed 4 years ago

staydecent commented 4 years ago

Hard to reproduce, but some mobile app users interacting with our APIs on certain projects would receive: {"detail":"CSRF Failed: Referer checking failed - no Referer."} when POSTing. This addresses that issue.

adriaanwm commented 4 years ago

@staydecent which project did this come up in?

staydecent commented 4 years ago

@adriaanwm Aliviado. For multiple people from their team. As soon as I deployed this, they could sign in again (and I confirmed in the logs that it wasn't incorrect login info).