mirror/netbox-community-netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2024-05-10 07:54:54 +00:00
Code Activity

Fixes #7226: Exempt GraphQL API requests from CSRF inspection

Browse Source
This commit is contained in:
jeremystretch
2021-09-09 09:06:45 -04:00
parent a226f06b1b
commit ad7b8a9ac8
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/release-notes/version-3.0.md
View File

@ -1,5 +1,13 @@
# NetBox v3.0
## v3.0.3 (FUTURE)
### Bug Fixes
* [#7226](https://github.com/netbox-community/netbox/issues/7226) - Exempt GraphQL API requests from CSRF inspection
---
## v3.0.2 (2021-09-08)
### Bug Fixes

3
netbox/netbox/urls.py
View File

@ -1,6 +1,7 @@
from django.conf import settings
from django.conf.urls import include
from django.urls import path, re_path
from django.views.decorators.csrf import csrf_exempt
from django.views.static import serve
from drf_yasg import openapi
from drf_yasg.views import get_schema_view
@ -63,7 +64,7 @@ _patterns = [
re_path(r'^api/swagger(?P<format>.json|.yaml)$', schema_view.without_ui(), name='schema_swagger'),
# GraphQL
path('graphql/', GraphQLView.as_view(graphiql=True, schema=schema), name='graphql'),
path('graphql/', csrf_exempt(GraphQLView.as_view(graphiql=True, schema=schema)), name='graphql'),
# Serving static media in Django to pipe it through LoginRequiredMiddleware
path('media/<path:path>', serve, {'document_root': settings.MEDIA_ROOT}),