Add CSRF exempt authentication to the batch_completion api

completion/api/authentication.py

@@ -0,0 +1,12 @@
+"""
+Authentication classes for the API.
+"""
+from __future__ import absolute_import, unicode_literals
+
+from rest_framework.authentication import SessionAuthentication
+
+
+class CsrfExemptSessionAuthentication(SessionAuthentication):
+
+    def enforce_csrf(self, request):
+        return  # To not perform the csrf check previously happening

completion/api/v1/views.py

@@ -9,6 +9,7 @@
 from django.utils.translation import ugettext as _
 from django.db import DatabaseError
 
+from rest_framework.authentication import BasicAuthentication
 from rest_framework.views import APIView
 from rest_framework.response import Response
 from rest_framework import permissions
@@ -26,13 +27,15 @@
 
 from completion import waffle
 from completion.api.permissions import IsStaffOrOwner, IsUserInUrl
+from completion.api.authentication import CsrfExemptSessionAuthentication
 from completion.models import BlockCompletion
 
 
 class CompletionBatchView(APIView):
     """
     Handles API requests to submit batch completions.
     """
+    authentication_classes = (CsrfExemptSessionAuthentication, BasicAuthentication)
     permission_classes = (permissions.IsAuthenticated, IsStaffOrOwner,)
     REQUIRED_KEYS = ['username', 'course_key', 'blocks']