def csrf_check(web_request): def real_decorator(view_func): @wraps(view_func) def wrapper(*args, **kwargs): if (request.method == 'GET'): return view_func(*args, **kwargs) u = urlparse(request.headers['Origin']) if u.netloc in ['www.my_awesome_domain.com', 'my_awesome_domain.com']: return view_func(*args, **kwargs) raise Unauthorized('Not Authorized') return wrapper return real_decorator