How do I handle CSRF in Django with AJAX requests?

How do I handle CSRF in Django with AJAX requests?

To handle CSRF in Django with AJAX, you need to include the CSRF token in your AJAX request headers.

Can you show me how to get the CSRF token in JavaScript?

Sure! You can get the CSRF token from the cookie or from a meta tag in your HTML. Here's an example using jQuery.

What if I'm not using jQuery? How can I do it with vanilla JavaScript?

You can use the following code to retrieve the CSRF token from the cookie in vanilla JavaScript:

function getCookie(name) { let cookieValue = null; if (document.cookie && document.cookie !== '') { const cookies = document.cookie.split(';'); for (let i = 0; i < cookies.length; i++) { const cookie = cookies[i].trim(); if (cookie.substring(0, name.length + 1) === (name + '=')) { cookieValue = decodeURIComponent(cookie.substring(name.length + 1)); break; } } } return cookieValue; }

const csrfToken = getCookie('csrftoken');

Thanks! How do I include the token in my AJAX request?

You can include the CSRF token in the headers of your AJAX request like this:

fetch('/your-url/', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-CSRFToken': csrfToken }, body: JSON.stringify(data) });