What to do with CSRF token missing or incorrect?

Question

Django

I want to send recorded audio file to View using AJAX. Writes a message:

Forbidden (CSRF token missing or incorrect.)

The jQuery code itself:

console.log("Остановка записи")
rec.stop()
gumStream.getAudioTracks()[0].stop();
$('#btnToStopRecord').attr('id', 'btnToRecord');
$("#toMessage").prop('disabled', false).attr('placeholder', "Введите сообщение...")
rec.exportWAV(function (blob) {
    let data = new FormData()
    data.append('csrfmiddlewaretoken', '{{ csrf_token }}')
    data.append('audio', blob)
    console.log(data)
    $.ajax({
        type: "POST",
        url: '{% url 'sendtext' %}',
        contentType: false,
        cache: false,
        processData: false,
        data: {
            'audioFile': data,
             'csrfmiddlewaretoken': '{{ csrf_token }}',
             },
      })

I also used in the view.py file:

• @csrf_exempt
  
• @method_decorator(csrf_protect)
  

Still nothing, tell me what to do?

Answer 1

You need to get a csrf token from the backend, and then send it back to the backend from the client along with a request.