error: "CSRF verification failed. Request aborted." when using jquery ajax with Django
Solution 1
having this a refrence to a js file with this content was my solution:
jQuery(document).ajaxSend(function(event, xhr, settings) {
function getCookie(name) {
var cookieValue = null;
if (document.cookie && document.cookie != '') {
var cookies = document.cookie.split(';');
for (var i = 0; i < cookies.length; i++) {
var cookie = jQuery.trim(cookies[i]);
// Does this cookie string begin with the name we want?
if (cookie.substring(0, name.length + 1) == (name + '=')) {
cookieValue = decodeURIComponent(cookie.substring(name.length + 1));
break;
}
}
}
return cookieValue;
}
function sameOrigin(url) {
// url could be relative or scheme relative or absolute
var host = document.location.host; // host + port
var protocol = document.location.protocol;
var sr_origin = '//' + host;
var origin = protocol + sr_origin;
// Allow absolute or scheme relative URLs to same origin
return (url == origin || url.slice(0, origin.length + 1) == origin + '/') ||
(url == sr_origin || url.slice(0, sr_origin.length + 1) == sr_origin + '/') ||
// or any other URL that isn't scheme relative or absolute i.e relative.
!(/^(\/\/|http:|https:).*/.test(url));
}
function safeMethod(method) {
return (/^(GET|HEAD|OPTIONS|TRACE)$/.test(method));
}
if (!safeMethod(settings.type) && sameOrigin(settings.url)) {
xhr.setRequestHeader("X-CSRFToken", getCookie('csrftoken'));
}
});
Solution 2
You should pull the csrfmiddlewaretoken from the dom element:
{'csrfmiddlewaretoken':$( "#csrfmiddlewaretoken" ).val()}
The above is exactly what I do in several places and it works.
Edit just to add some clarity drawing from your material:
<script type="text/javascript">
$.ajax({
type:"POST",
url:"{% url DrHub.views.ajxTest %}",
data: {
'start': $('#id_startTime').val(),
'end': $('#id_endTime').val(),
'csrfmiddlewaretoken':$( "#csrfmiddlewaretoken" ).val()
},
success: function(data){
alert(data);
}
});
</script>
Solution 3
There's also another shortcut to this. I wouldn't know if the security thing here is of so much value and importance. I ran into this problem but there seems to be a lot of hacks around this that end up trying to submit the csrftoken from an existing cookie. I don't know what would happen if this cookie does not exist or was not set.
My approach was to add a @csrf_exempt
to the view that processes the ajax post.
You import the csrf_exempt
from django.views.decorators.csrf
Like this:
from django.views.decorators.csrf import csrf_exempt
And than, from the view method:
@csrf_exempt
def the_method_to_be_called(request):
...
see this link
Solution 4
I have solve it by doing following:
let data = {};
data.somedata = somedata;
data.csrfmiddlewaretoken = '{{ csrf_token }}';
$.ajax({
type: 'POST',
url: "/myadmin/user/medical/"+rowId,
data: data,
dataType: "json",
success: function(resultData) { alert("Save Complete") }
});
Hope this will work for someone.
Related videos on Youtube
Asma Gheisari
Updated on June 04, 2022Comments
-
Asma Gheisari almost 2 years
in template:
<script type="text/javascript"> $.ajax({ type:"POST", url:"{% url DrHub.views.ajxTest %}", data: { 'start': $('#id_startTime').val(), 'end': $('#id_endTime').val(), 'csrfmiddlewaretoken': '{{ csrf_token }}' }, success: function(data){ alert(data); } }); </script> . . . <form method='POST' action="."> {% csrf_token %} <input type="text id="id_startTime" /> <input type="text id="id_endTime" /> <input type="submit" value="send" /> </form>
in views:
def ajxTest(request): if request.is_ajax(): if request.method == 'POST': return HttpResponse(json.dumps({'message' : 'awesome'},ensure_ascii=False), mimetype='application/javascript')
in settings.py:
MIDDLEWARE_CLASSES = ( 'django.middleware.common.CommonMiddleware', 'django.contrib.sessions.middleware.SessionMiddleware', 'django.middleware.csrf.CsrfViewMiddleware', 'django.contrib.auth.middleware.AuthenticationMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.contrib.messages.middleware.MessageMiddleware', 'django.middleware.locale.LocaleMiddleware', )
when submitting form I have this error:
CSRF verification failed. Request aborted.
I searched alot but none of suggested solutions worked for me!
like : Django CSRF check failing with an Ajax POST request
and : Ajax Post in Django framework?
I refreenced to a js file with this content:
$.ajaxSetup({ beforeSend: function(xhr, settings) { function getCookie(name) { var cookieValue = null; if (document.cookie && document.cookie != '') { var cookies = document.cookie.split(';'); for (var i = 0; i < cookies.length; i++) { var cookie = jQuery.trim(cookies[i]); // Does this cookie string begin with the name we want? if (cookie.substring(0, name.length + 1) == (name + '=')) { cookieValue = decodeURIComponent(cookie.substring(name.length + 1)); break; } } } return cookieValue; } if (!(/^http:.*/.test(settings.url) || /^https:.*/.test(settings.url))) { // Only send the token to relative URLs i.e. locally. xhr.setRequestHeader("X-CSRFToken", getCookie('csrftoken')); } } });
but this didn't work,too!
And I saw a solution that say use ajaxSetup instead of ajaxSend to post data,how can I do this?
-
Rafay about 12 yearshave you checked in the firebug that the CSRF token value are being posted
-
Rafay about 12 yearsyou can get it from here getfirebug.com its a firefox extension
-
-
James R about 12 yearsTry adding this: 'django.middleware.csrf.CsrfResponseMiddleware', directly below 'django.middleware.csrf.CsrfViewMiddleware',
-
Asma Gheisari about 12 yearsadding this line cause this error:A server error occurred. Please contact the administrator.
-
James R about 12 yearswhat version of django are you using?
-
Asma Gheisari about 12 yearsdjango is 1.3,what do U think?
-
Pieter le Roux about 10 yearsMy version of django (1.7) doesn't give the hidden element an id, so
#csrf...
won't work. Instead I needed to get the element using a name selector:$('[name=csrfmiddlewaretoken]').val()
.