CSRF Middleware

class smarter.lib.django.middleware.csrf.SmarterCsrfViewMiddleware(get_response)

Bases: CsrfViewMiddleware, SmarterRequestMixin

ASGI-safe CSRF middleware.

Extends Django’s CsrfViewMiddleware while preserving all Django request lifecycle invariants.

__init__(get_response)

allowed_origin_subdomains

csrf_trusted_origins_hosts

Django internals use this property.

We preserve compatibility while avoiding mutation of global settings.

property formatted_class_name: str

Returns the class name in a formatted string along with the name of this mixin.

Returns:

Formatted class name string.

get_dynamic_trusted_origins(request)

Return request-scoped trusted origins.

IMPORTANT: - never mutate Django settings - always return a fresh list

Return type:

list[str]

process_view(request, callback, callback_args, callback_kwargs)

Main CSRF enforcement hook.

IMPORTANT: - return None to continue processing - return HttpResponse to short-circuit - NEVER return self.get_response(request)