From f1ea46188f96eece313df3672f7ddbe5f9dd0c21 Mon Sep 17 00:00:00 2001 From: Jonas Braathen Date: Thu, 5 Jun 2025 19:38:17 +0200 Subject: [PATCH] Make the graphql endpoint CSRF exempt --- bbs/urls.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/bbs/urls.py b/bbs/urls.py index 2841c7a..2dd6113 100644 --- a/bbs/urls.py +++ b/bbs/urls.py @@ -2,6 +2,7 @@ from django.conf import settings from django.conf.urls.static import static from django.contrib import admin from django.contrib.auth.views import LoginView, LogoutView +from django.views.decorators.csrf import csrf_exempt from django.urls import path from strawberry.django.views import GraphQLView @@ -22,7 +23,7 @@ urlpatterns = [ name="django.contrib.auth.views.logout", ), path("admin/", admin.site.urls), - path("graphql/", GraphQLView.as_view(schema=schema), name="graphql"), + path("graphql/", csrf_exempt(GraphQLView.as_view(schema=schema)), name="graphql"), ] urlpatterns += static("/media", document_root=settings.MEDIA_ROOT)