Merge pull request #110 from edx/csrftoken-fix

Updated CSRF cookie name in JS

ecommerce/settings/base.py

@@ -399,3 +399,12 @@ REST_FRAMEWORK = {
 
 # Resolving deprecation warning
 TEST_RUNNER = 'django.test.runner.DiscoverRunner'
+
+# COOKIE CONFIGURATION
+# The purpose of customizing the cookie names is to avoid conflicts when
+# multiple Django services are running behind the same hostname.
+# Detailed information at: https://docs.djangoproject.com/en/dev/ref/settings/
+SESSION_COOKIE_NAME = 'ecommerce_sessionid'
+CSRF_COOKIE_NAME = 'ecommerce_csrftoken'
+LANGUAGE_COOKIE_NAME = 'ecommerce_language'
+# END COOKIE CONFIGURATION

ecommerce/settings/local.py

@@ -16,15 +16,6 @@ DEBUG = True
 TEMPLATE_DEBUG = DEBUG
 # END DEBUG CONFIGURATION
 
-# COOKIE CONFIGURATION
-# The purpose of customizing the cookie names is to avoid conflicts when
-# multiple Django services are running behind the same hostname.
-# Detailed information at: https://docs.djangoproject.com/en/dev/ref/settings/
-SESSION_COOKIE_NAME = 'ecommerce_sessionid'
-CSRF_COOKIE_NAME = 'ecommerce_csrftoken'
-LANGUAGE_COOKIE_NAME = 'ecommerce_language'
-# END COOKIE CONFIGURATION
-
 # EMAIL CONFIGURATION
 # See: https://docs.djangoproject.com/en/dev/ref/settings/#email-backend
 EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'

ecommerce/static/oscar/js/order_list.js

@@ -12,7 +12,7 @@ $(document).ready(function () {
         $.ajax({
             url: '/api/v2/orders/' + order_number + '/fulfill/',
             method: 'PUT',
-            headers: {'X-CSRFToken': $.cookie('csrftoken')}
+            headers: {'X-CSRFToken': $.cookie('ecommerce_csrftoken')}
         }).success(function (data) {
             $('tr[data-order-number=' + order_number + '] .order-status').text(data.status);
             addMessage('alert-success', 'icon-check-sign', 'Order ' + order_number + ' has been fulfilled.');

ecommerce/static/oscar/js/refund_list.js

@@ -16,7 +16,7 @@ $(document).ready(function () {
             url: '/api/v2/refunds/' + refund_id + '/process/',
             data: { action: decision },
             method: 'PUT',
-            headers: {'X-CSRFToken': $.cookie('csrftoken')}
+            headers: {'X-CSRFToken': $.cookie('ecommerce_csrftoken')}
         }).success(function (data) {
             $('tr[data-refund-id=' + refund_id + '] .refund-status').text(data.status);
             addMessage('alert-success', 'icon-check-sign', 'Refund #' + refund_id + ' has been processed.');