using Umbraco.Web.BackOffice.Filters; using Umbraco.Web.Common.Filters; namespace Umbraco.Web.BackOffice.Controllers { /// /// An abstract API controller that only supports JSON and all requests must contain the correct csrf header /// /// /// Inheriting from this controller means that ALL of your methods are JSON methods that are called by Angular, /// methods that are not called by Angular or don't contain a valid csrf header will NOT work. /// [ValidateAngularAntiForgeryToken] [AngularJsonOnlyConfiguration] // TODO: This could be applied with our Application Model conventions [JsonExceptionFilter] public abstract class UmbracoAuthorizedJsonController : UmbracoAuthorizedApiController { } }