Django with custom authentication backends, is Csrf middleware really required ?
- by Hellnar
Hello,
Under Django 1.1.1, I am using several authentication backends such as social-registration for facebook connect and django-emailauth for email based authentication instead of user names.
I am curious if the Csrf middleware is an essential security measure as it seems like it sometimes generates problems, especially with facebook connect.
My project is rather simple. Each user have a profile which they can fill and a purchase page where they fill the payment for to do purchases. Either of these pages are protected via @login_required.