mirror/archivebox
1
0
Fork 0
mirror of https://github.com/pirate/ArchiveBox.git synced 2025-08-23 22:53:00 +02:00
Code Issues Releases Wiki Activity

disable cookie auth in API because csrf=False

Browse Source
This commit is contained in:
Nick Sweeting
2024-09-02 01:13:19 -07:00
parent da76a84c45
commit dd05ad04fa
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
archivebox/api/auth.py
View File

@@ -105,6 +105,6 @@ API_AUTH_METHODS = [
HeaderTokenAuth(), HeaderTokenAuth(),
BearerTokenAuth(), BearerTokenAuth(),
QueryParamTokenAuth(), QueryParamTokenAuth(),
django_auth_superuser, # django_auth_superuser, # django admin cookie auth, not secure to use with csrf=False
UsernameAndPasswordAuth(), UsernameAndPasswordAuth(),
] ]