BUG: Does PDT's return url has @csrf_exempt ?

spookylukey / django-paypal

A pluggable Django application for integrating PayPal Payments Standard or Payments Pro

MIT License

729 stars 208 forks source link

BUG: Does PDT's return url has @csrf_exempt ? #133

Closed girishkumarkh closed 8 years ago

girishkumarkh commented 8 years ago

While testing PDT return call after paypal payment is gone through the code leads us into CSRF verification failed. There is possibility of bug here. Ref: https://github.com/spookylukey/django-paypal/blob/master/paypal/standard/pdt/views.py#L29

spookylukey commented 8 years ago

I don't understand what you are saying. For PDT, PayPal sends a GET request to that view, as far as I know, and as far as the docs say:

https://developer.paypal.com/webapps/developer/docs/classic/products/payment-data-transfer/

girishkumarkh commented 8 years ago

Perhaps, It might be my sandbox environment - Whenever I try testing payment via PDT I end up getting CSRF verification failed error for some reason.

spookylukey commented 8 years ago

Closing because this doesn't seem to be a bug in django-paypal