I’ve got an iOS app that I need to write an API for, and I’d like to use Django as a backend. However, I keep running into various security features that I would rather not disable or ignore, such as anti-CSRF measures when accepting POST requests.
Is there any literature about using Django as a backend for an API? What about API security in general? Is this even a good idea?
You may want to check out django-piston. It’s a decent framework for django for creating RESTful APIs.