from rest_framework import permissions from rest_framework.authentication import SessionAuthentication from rest_framework.permissions import BasePermission, SAFE_METHODS class CsrfExemptSessionAuthentication(SessionAuthentication): def enforce_csrf(self, request): # To not perform the csrf check previously happening return class ReadOnly(BasePermission): def has_permission(self, request, view): return request.method in SAFE_METHODS