Django 和 iOS 中的 CSRF 令牌

CSRF 令牌在 Django 和 iOS 中的应用

html
  {% csrf_token %}
  
  提交

python
from django.views.decorators.csrf import csrf_exempt
@csrf_exempt
def my_view(request):
    if request.method == 'POST':
        # 处理表单提交
    else:
        # 处理其他请求

swift
func getCSRFToken(completion: @escaping (String?) -> Void) {
    let url = URL(string: "https://example.com/csrf_token")!
    let task = URLSession.shared.dataTask(with: url) { (data, response, error) in
        guard let data = data,
              let token = String(data: data, encoding: .utf8) else {
            completion(nil)
            return
        }
        completion(token)
    }
    task.resume()
}

swift
func submitForm() {
    getCSRFToken { (token) in
        guard let token = token else {
            // 处理获取 CSRF 令牌失败的情况
            return
        }
        
        let url = URL(string: "https://example.com/submit_form")!
        var request = URLRequest(url: url)
        request.httpMethod = "POST"
        request.setValue("application/x-www-form-urlencoded", forHTTPHeaderField: "Content-Type")
        request.setValue("Token \(token)", forHTTPHeaderField: "X-CSRF-Token")
        
        // 添加其他请求参数
        
        let task = URLSession.shared.dataTask(with: request) { (data, response, error) in
            // 处理响应
        }
        task.resume()
    }
}