title: Token Auth - Django Rest Framework Postman
body: <p>I am fairly new to Django so sorry if this is a silly question:</p>
  
  <p>When I try to send the request through postman I receive this <code>403</code> error:</p>
  
  <p><code>{ "detail": "CSRF Failed: CSRF token missing or incorrect." }</code></p>
  
  <p>I have also tried adding it to the <code>params</code> section as well in postman, resulting in the same error. </p>
  
  <p>However, when using the curl command, I receive the correct response: </p>
  
  <p><code>curl -X POST -d "grant_type=convert_token&amp;client_id=r29GLakM6OZ7c4Zg2cwuSXR7M1jiQHIEEMLvtbWA&amp;client_secret=S2xKO81zzYBUTdxM14QiQWb63jnNvPLIcqDTrN9HIYj7t7ldfuCQFWoziWF6h88OgsMUCUNI6HbhIxZQ8ScPFWUWVcJNjaZspbGkDK1j9SsRYJi9uW6DhTr0A9QKvyOZ&amp;backend=facebook&amp;token=EAAY5l4TWgr4BAMjficP4mPKqlbVwVRXI0Xs5GLXSN97sMyKe3muElrkpXRcxJkiZCMzC7tfZBfT4Cci52Pk6Bb2GQm2BARm23tsJoaViOovmvZABlGlJPPZCJ9OecYvfEinUOBaDeBugiDv614yUzOAIfyE0lfZCAX8YAbYyxnlqYYtmS6ywH" http://localhost:8000/api/social/convert-token
  </code></p>
  
  <p>What am I doing wrong?</p>
  
  <p>Edit: I am using the <a href="https://github.com/PhilipGarnero/django-rest-framework-social-oauth2" rel="nofollow noreferrer">django-rest-framework-social-oauth2</a> and following a tutorial online which did not require passing in any other token in the <code>X-CSRFToken</code> header field.</p>
  
  <p><a href="https://i.stack.imgur.com/XPOvk.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/XPOvk.png" alt="enter image description here"></a></p>