github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Drop API token requirement from API explorer, refs #1871

Browse source
This commit is contained in:
Simon Willison 2022-10-30 13:09:55 -07:00
commit 9eb9ffae3d
2 changed files with 13 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
datasette/default_permissions.py
View file

@ -131,3 +131,12 @@ def register_commands(cli):
if debug:
click.echo("\nDecoded:\n")
click.echo(json.dumps(ds.unsign(token, namespace="token"), indent=2))
@hookimpl
def skip_csrf(scope):
# Skip CSRF check for requests with content-type: application/json
if scope["type"] == "http":
headers = scope.get("headers") or {}
if dict(headers).get(b"content-type") == b"application/json":
return True