Fixed 403 in mix upload

dss/settings.py

@@ -115,6 +115,7 @@ MIDDLEWARE_CLASSES = (
     'django.contrib.messages.middleware.MessageMiddleware',
     'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'django.middleware.gzip.GZipMiddleware',
+    'spa.middleware.uploadify.SWFUploadMiddleware'
     #'debug_toolbar.middleware.DebugToolbarMiddleware',
     )
 

spa/ajax.py

@@ -39,8 +39,7 @@ class AjaxHandler(object):
             url(r'^live_now_playing/$', 'spa.ajax.live_now_playing'),
             url(r'^like/$', 'spa.ajax.like', name='ajax_mix_like'),
             url(r'^favourite/$', 'spa.ajax.favourite', name='ajax_mix_favourite'),
-            url(r'^facebook_post_likes_allowed/$', 'spa.ajax.facebook_post_likes_allowed',
-                name='ajax_facebook_post_likes_allowed'),
+            url(r'^facebook_post_likes_allowed/$', 'spa.ajax.facebook_post_likes_allowed', name='ajax_facebook_post_likes_allowed'),
             url(r'^upload_image/(?P<mix_id>\d+)/$', 'spa.ajax.upload_image', name='ajax_upload_image'),
             url(r'^upload_release_image/(?P<release_id>\d+)/$', 'spa.ajax.upload_release_image', name='ajax_upload_release_image'),
             url(r'^upload_avatar_image/$', 'spa.ajax.upload_avatar_image', name='ajax_upload_avatar_image'),
@@ -203,7 +202,6 @@ def upload_avatar_image(request):
         logger.exception("Error uploading avatar")
     return HttpResponse(_get_json("Failed"))
 
-@csrf_exempt
 def upload_mix_file_handler(request):
     try:
         if 'Filedata' in request.FILES and 'upload-hash' in request.POST:

spa/middleware/__init__.py

@@ -0,0 +1 @@
+__author__ = 'fergalm'

spa/middleware/uploadify.py

@@ -0,0 +1,9 @@
+from django.conf import settings
+from django.core.urlresolvers import reverse
+
+class SWFUploadMiddleware(object):
+    def process_request(self, request):
+        if (request.method == 'POST') and\
+           (request.path == reverse('ajax_upload_mix_file_handler')) and\
+           request.POST.has_key(settings.SESSION_COOKIE_NAME):
+            request.COOKIES[settings.SESSION_COOKIE_NAME] = request.POST[settings.SESSION_COOKIE_NAME]