在Django ajax后csrf令牌失踪请求工作使用获取请求

Question

我正在与metronic数据表，其中我有一个文件，其中ajax函数的工作。问题是，当我在ajax函数中使用类型“GET”时，它可以工作，但是在POST中它不起作用，并且它在控制台中给CSRF令牌缺少错误，但是在GET的情况下它不会给出任何错误，我使用的是django框架我的网站和我的AJAX功能是： -

"ajax": { // define ajax settings 
    "url": document.URL, // ajax URL 
    "type": "POST", // request type 
    "timeout": 20000, 
    "data": function(data) { // add request parameters before submit 
     $.each(ajaxParams, function(key, value) { 
      data[key] = value; 
     }); 
     Metronic.blockUI({ 
      message: tableOptions.loadingMessage, 
      target: tableContainer, 
      overlayColor: 'none', 
      cenrerY: true, 
      boxed: true 
     }); 
    }, 
} 

urls.py文件是：

from django.conf.urls import url 
from . import views 

urlpatterns = [ 
    url(r'^$', views.index, name='index'), 
    url(r'^logout$', views.logout, name='logout'), 
    url(r'^dashboard$', views.dashboard, name='dashboard'), 
    url(r'^profile$', views.profile, name='profile'), 
    url(r'^edit-profile$', views.edit_profile, name='edit-profile'), 
    url(r'^check-password$', views.check_password, name='check-password'), 
    url(r'^help$', views.faq_management, name='help'), 
    url(r'^testing$', views.testing_database, name='testing'), 
    url(r'^add-faq$', views.add_faq, name='add-faq') 
] 

该功能相关的看法是：

from django.http import HttpResponse 
from django.shortcuts import render, redirect 
from django.core.exceptions import ObjectDoesNotExist 
from models import Admin, Help 
from django.contrib import messages 
from django.utils.html import escape 
from .forms import ImageUploadForm 
import json 
from datetime import datetime 

def faq_management(request): 
if 'admin_id' in request.session: 
    if request.method == 'GET': 
     if request.is_ajax(): 
      ajax_data = request.GET 
      if ajax_data['length'] !=-1 : 
       limit = ajax_data['length'] 
      else : 
       limit="all" 
      questions = Help.objects.all().filter().values('id','question','description','status','created','modified').order_by('-id') 
      datalist = [] 
      i=1; 
      for que in questions: 
       if(que['status']=='1'): 
        checked='on' 
       else: 
        checked='off' 
       actionValues='<a title="Edit" class="btn btn-sm green margin-top-10" href=""> <i class="fa fa-edit"></i></a>'; 
       inner_data_list = [ 
        i, 
        que['question'], 
        (que['description'][:150] + '..') if len(que['description']) > 150 else que['description'], 
        '<div id=%s class="bootstrap-switch bootstrap-switch-%s bootstrap-switch-wrapper bootstrap-switch-animate toogle_switch"><div class="bootstrap-switch-container" ><span class="bootstrap-switch-handle-on bootstrap-switch-primary">&nbsp;Active&nbsp;&nbsp;</span><label class="bootstrap-switch-label">&nbsp;</label><span class="bootstrap-switch-handle-off bootstrap-switch-default">&nbsp;Inactive&nbsp;</span></div></div>'%(que['id'],checked), 
        que['created'], 
        que['modified'], 
        actionValues 
       ] 
       datalist.append(inner_data_list) 
       i += 1 
      iTotalRecords=questions.count() 
      iDisplayLength = int(ajax_data['length']); 
      iDisplayStart = int(ajax_data['start']); 
      if iDisplayLength < 0 : 
       iDisplayLength = iTotalRecords 
      sEcho = int(ajax_data['draw']) 
      records = {} 
      records['data'] = {} 
      records['data'] = {} 
      records['data'] = datalist 
      records['customActionStatus'] = {} 
      records['customActionMessage'] = {} 
      records['draw'] = {} 
      records['recordsTotal'] = {} 
      records['recordsFiltered'] = {} 
      if request.GET.get('customActionType', '') == 'group_action': 
       records['customActionStatus'] = 'OK' 
       records['customActionMessage'] = 'Group action successfully has been completed. Well done!' 
      records["draw"] = sEcho 
      records["recordsTotal"] = iTotalRecords 
      records["recordsFiltered"] = iTotalRecords 
      return HttpResponse(json.dumps(records, default=json_serial)) 

     admin = Admin.objects.get(pk = request.session["admin_id"]) 
     return render(request, 'admin/faq-manage.py', { 
      'adminInfo': admin, 
     }) 
else: 
    messages.add_message(request, messages.ERROR, 'ERROR! Kindly login first.') 
    return redirect(index) 

Answer 1

你没有得到错误与GET，因为只有POST请求需要CSRF令牌。

看看这个主题中的文档 - https://docs.djangoproject.com/en/dev/ref/csrf/