toastdriven/django-tastypie — Issue #330: Sessions and/or the Set-Cookie header should be suppressed when tastypie sends a response
Author: eykd
Created: 2012-01-13 00:15:10+00:00
State: open

I've noticed that when I'm using the Django sessions framework with the rest of the site, API responses from tastypie contain a Set-Cookie header.

I would like to be able to suppress these headers--even better would be to suppress session creation altogether, as I expect that a busy API could really spam the sessions backend. Not sure if this is possible w/o custom session middleware.

I am using authentication backends to implement a custom tastypie.authentication.Authentication subclass, but I don't think this is the culprit. I'm pretty sure it's the Middleware.