angee.iam.middleware

IAM HTTP middleware.

BearerTokenCsrfExemptMiddleware

class BearerTokenCsrfExemptMiddleware()

Mark bearer-token requests as CSRF-exempt.

Browser session requests remain protected by Django's CSRF middleware. Bearer clients present credentials explicitly through the Authorization header, so they follow the token-authentication CSRF shape.

__init__

def __init__(get_response: Callable[[Any], Any]) -> None

Store the next middleware or view callable.

__call__

def __call__(request: Any) -> Any

Exempt syntactic Bearer requests before CSRF's view check runs.