Having a POST’able API and Django’s CSRF Middleware December 28, 2023 by Tarik How about just splitting off a view(s) for your desktop client and decorating them with csrf_exempt?