how to keep session and CSRF token in locus test

Question

I wan't to test my django web app with locust.io. In ha form i have the problem that it is secured with a CSRF token. I do the following:

class WebsiteTasks(TaskSet):
    def on_start(self):
        print("On start")

    @task
    def post_answer(self):
        self.client.get("/polls/2/vote")
        self.client.post("/polls/2/vote/", {"choice": "8"})

Why do I get a 403 error? That the post is fobidden, the locust documentation says that the client objects keeps the session alive..

Answer 1

change your code as:

@task
def post_answer(self):
    response = self.client.get("/polls/2/vote")
    csrftoken = response.cookies['csrftoken']

    self.client.post("/polls/2/vote/", 
                     {"choice": "8"}, 
                     headers={"X-CSRFToken": csrftoken})