fix: disable CSRF on REST API requests

work around for bug in invenio-rest
cca · Feb 9, 2024 · d3f4d0d · d3f4d0d
1 parent dd587c6
commit d3f4d0d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/invenio.cfg b/invenio.cfg
@@ -136,6 +136,8 @@ RDM_RECORDS_PERSONORG_SCHEMES.update(
 SITE_UI_URL = "https://127.0.0.1"
 
 SITE_API_URL = "https://127.0.0.1/api"
+# TODO insecure but needed due to https://github.com/inveniosoftware/invenio-rest/issues/132
+REST_CSRF_ENABLED = False
 
 APP_RDM_DEPOSIT_FORM_DEFAULTS = {
     "publication_date": lambda: datetime.now().strftime("%Y-%m-%d"),