24Şub
How to protect web app against login CSRF while also allowing mobile app/curl to access REST API?
I am using Django REST framework.
I want a single API for all of my clients (web, mobile, curl).
I understand that I need to include a CSRF token in requests originating from the web client, to protect against CSRF. However, this is not ne…