csrf origin check

csrf_decorator.py

def csrf_check(web_request):
    def real_decorator(view_func):
        @wraps(view_func)
        def wrapper(*args, **kwargs):
            if (request.method == 'GET'):
                return view_func(*args, **kwargs)

            u = urlparse(request.headers['Origin'])
            if u.netloc in ['www.my_awesome_domain.com', 'my_awesome_domain.com']:
                return view_func(*args, **kwargs)

            raise Unauthorized('Not Authorized')
        return wrapper
    return real_decorator