Also you will need to add allowed hosts in djnago settung to stop requests from untrusted origins
On Thu, Mar 11, 2021, 01:43 Kunal Solanke <[email protected]> wrote: > By doing this you won't be able to stop the get requests from browser, but > post requests can be stopped. > > On Thu, Mar 11, 2021, 01:42 Kunal Solanke <[email protected]> > wrote: > >> Ok in that case, drf by default sets a browsableapi render on all of the >> views and viewsets, either overide that in settings, or use >> renderer_classes=(JSONRendere,) in views in which yiu want to stop it. >> >> Search for BrowsableAPIRenderer. >> >> Ig you should have mentioned drf sooner. >> >> >> >> >> On Thu, Mar 11, 2021, 01:35 Mostapha Bouderka <[email protected]> >> wrote: >> >>> I'am using the django rest framework >>> >>> >>> On Wednesday, March 10, 2021 at 8:01:26 PM UTC [email protected] >>> wrote: >>> >>>> Idk the overall use case here , >>>> But if the prject is reasonably bigger and you want to use class based >>>> views, I'd suggest you to use drf. >>>> But you if you don't want to use that,you will have to overide most to >>>> the CBV given by djnango as most of them expect a success url or a template >>>> that they render. >>>> >>>> If you are fine with functional views, do as kasper said,just use post >>>> method. And moreover send JsonResponse . >>>> >>>> On Thu, Mar 11, 2021, 01:14 Kasper Laudrup <[email protected]> >>>> wrote: >>>> >>>>> On 10/03/2021 16.43, Mostapha Bouderka wrote: >>>>> > I'm working on a project with react and django; and want to use >>>>> django >>>>> > views to be used as information source only and not show a page on >>>>> the >>>>> > browser. For example, I have a pilot sign up page that uses a pilot >>>>> > create view to provide information to the pilot model. I want the >>>>> users >>>>> > to be able to sign up only by using the sign up page, but if someone >>>>> > accesses the create pilot view, he shouldn't see anything. >>>>> > ( if the url is domain.com/sign-up, he can see the react form ) >>>>> > (if the url is domain.com/pilot/create, he shouldn't see anything >>>>> or get >>>>> > an error, this url should only be used by the react form) >>>>> > >>>>> > I hope the question is clear and thanks in advance. >>>>> > >>>>> >>>>> If I understand correctly, wouldn't it work simply to look at the >>>>> request method for the "domain.com/pilot/create" page and only return >>>>> a >>>>> response in case the method is POST very similar to any other form >>>>> handling like this example: >>>>> >>>>> >>>>> https://docs.djangoproject.com/en/dev/topics/forms/#using-a-form-in-a-view >>>>> >>>>> but leaving out the else branch and the default return (which would >>>>> then >>>>> make Django return an HTTP 405 error)? >>>>> >>>>> I don't know anything about React, but from a quick look at the >>>>> documentation it like it's just normal HTTP forms using POST. >>>>> >>>>> Kind regards, >>>>> >>>>> Kasper Laudrup >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "Django users" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/d/msgid/django-users/219471bc-d101-a13e-388f-25a0836e61ef%40stacktrace.dk >>>>> . >>>>> >>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Django users" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/django-users/30357e43-13fd-404a-88a3-90ca135aeff7n%40googlegroups.com >>> <https://groups.google.com/d/msgid/django-users/30357e43-13fd-404a-88a3-90ca135aeff7n%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >> -- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAOecAnz4T5tYLBJrnVyJE5WJqPCMVXhEJmigbkJK_K%2BqekvxXg%40mail.gmail.com.
