extjs ajax action,Django - Post ajax request forbidden 403 with ExtJS

I am using ExtJs to create a button that do an ajax post to my django application, but the post is blocked by a FORBIDDEN (403) error.

I tryed to pass the CSRF token in as POST data by setting a custom X-CSRFToken header to the value of the CSRF token (https://docs.djangoproject.com/en/1.3/ref/contrib/csrf/#ajax) without success

ExtJS.js

action = new Ext.Button({

text: 'Ajax Test',

handler: function () {

Ext.Ajax.request({

url: 'test/',

method: 'POST',

headers: { 'Content-Type': 'application/json'},

params: {'test': 'test'},

success: function(response, opts) {

var obj = Ext.decode(response.responseText);

console.dir(obj);

},

failure: function(response, opts) {

console.log('server-side failure');

}

});

},

});

view.py

def test(request):

print "TEST WORKING"

print dict(request.POST.copy().iteritems())

return HttpResponse("")

CHROME NETWORK TAB:

Response:

CSRF verification failed. Request aborted.

Cookies:

Request Cookies:

csrftoken : S7uLgmhqeprWqL4NdH9mznIfpTgyM9RP

djdt : hide

djdttop : 30

sessionid : sx4ukmkitqp39wvuve1a9zed2kjiwfb1

Response Cookies:

(empty)

Headers:

Request URL:http://127.0.0.1:8000/basqui/layer/edit/2/test/

Request Method:POST

Status Code:403 FORBIDDEN

Request Headersview source

Accept:*/*

Accept-Encoding:gzip,deflate,sdch

Accept-Language:fr-FR,fr;q=0.8,en-US;q=0.6,en;q=0.4

Connection:keep-alive

Content-Length:9

Content-Type:application/x-www-form-urlencoded; charset=UTF-8

Cookie:sessionid=sx4ukmkitqp39wvuve1a9zed2kjiwfb1; csrftoken=S7uLgmhqeprWqL4NdH9mznIfpTgyM9RP; djdttop=30; djdt=hide

Host:127.0.0.1:8000

Origin:http://127.0.0.1:8000

Referer:http://127.0.0.1:8000/basqui/layer/edit/2

User-Agent:Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36

X-Requested-With:XMLHttpRequest

Form Dataview sourceview URL encoded

test:test

Response Headersview source

Content-Type:text/html

Date:Tue, 07 Jan 2014 16:52:15 GMT

Server:WSGIServer/0.1 Python/2.7.5

X-Frame-Options:SAMEORIGIN

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值