o
    ¨ñiº  ã                   @   s$   d Z ddlmZ G dd„ deƒZdS )z>
Custom middleware to exempt API routes from CSRF protection.
é    )ÚMiddlewareMixinc                   @   s   e Zd ZdZdd„ ZdS )ÚDisableCSRFForAPIa0  
    Middleware to disable CSRF protection for API endpoints.
    This is safe because REST APIs typically use token-based authentication
    or other authentication methods that don't require CSRF protection.
    
    This middleware must be placed BEFORE CsrfViewMiddleware in MIDDLEWARE settings.
    c                 C   s   |j  d¡rt|ddƒ d S )Nz/api/Ú_dont_enforce_csrf_checksT)ÚpathÚ
startswithÚsetattr)ÚselfÚrequest© r
   ú9/var/www/html/philips/senior_engagement_app/middleware.pyÚprocess_request   s   z!DisableCSRFForAPI.process_requestN)Ú__name__Ú
__module__Ú__qualname__Ú__doc__r   r
   r
   r
   r   r      s    r   N)r   Údjango.utils.deprecationr   r   r
   r
   r
   r   Ú<module>   s    