disable cookie auth in API because csrf=False

This commit is contained in:
Nick Sweeting 2024-09-02 01:13:19 -07:00
parent da76a84c45
commit dd05ad04fa
No known key found for this signature in database

View file

@ -105,6 +105,6 @@ API_AUTH_METHODS = [
HeaderTokenAuth(),
BearerTokenAuth(),
QueryParamTokenAuth(),
django_auth_superuser,
# django_auth_superuser, # django admin cookie auth, not secure to use with csrf=False
UsernameAndPasswordAuth(),
]