1. 使用装饰器

@csrf_exempt
def register(request):
  username = request.POST['username']
  password = request.POST['password']
  ........

2. 取消单个视图函数的csrf验证

path('register/', csrf_exempt(RegisterView.as_view())), 

3. 注销掉CsrfViewMiddleware这个中间件

MIDDLEWARE = [
    'corsheaders.middleware.CorsMiddleware',
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    # 'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]