Use HTTP post for csv export

Also fixes a missing translation string

bookwyrm/templates/preferences/export.html

@@ -13,10 +13,13 @@
         {% trans "Your export will include all the books on your shelves, books you have reviewed, and books with reading activity." %}
     </p>
     <p>
-        <a href="{% url 'prefs-export-file' %}" class="button">
+        <form name="export" method="POST" href="{% url 'prefs-export' %}">
+            {% csrf_token %}
+            <button type="submit" class="button">
                 <span class="icon icon-download" aria-hidden="true"></span>
-            <span>Download file</span>
+                <span>{% trans "Download file" %}</span>
-        </a>
+            </button>
+        </form>
     </p>
 </div>
 {% endblock %}

bookwyrm/tests/views/preferences/test_export.py

@@ -54,7 +54,7 @@ class ExportViews(TestCase):
             user=self.local_user,
             book=self.book,
         )
-        request = self.factory.get("")
+        request = self.factory.post("")
         request.user = self.local_user
         export = views.export_user_book_data(request)
         self.assertIsInstance(export, StreamingHttpResponse)

bookwyrm/urls.py

@@ -482,11 +482,6 @@ urlpatterns = [
         name="prefs-password",
     ),
     re_path(r"^preferences/export/?$", views.Export.as_view(), name="prefs-export"),
-    re_path(
-        r"^preferences/export/file/?$",
-        views.export_user_book_data,
-        name="prefs-export-file",
-    ),
     re_path(r"^preferences/delete/?$", views.DeleteUser.as_view(), name="prefs-delete"),
     re_path(r"^preferences/block/?$", views.Block.as_view(), name="prefs-block"),
     re_path(r"^block/(?P<user_id>\d+)/?$", views.Block.as_view()),

bookwyrm/views/__init__.py

@@ -28,7 +28,7 @@ from .admin.user_admin import UserAdmin, UserAdminList
 # user preferences
 from .preferences.change_password import ChangePassword
 from .preferences.edit_user import EditUser
-from .preferences.export import Export, export_user_book_data
+from .preferences.export import Export
 from .preferences.delete_user import DeleteUser
 from .preferences.block import Block, unblock
 

bookwyrm/views/preferences/export.py

@@ -7,7 +7,6 @@ from django.http import StreamingHttpResponse
 from django.template.response import TemplateResponse
 from django.views import View
 from django.utils.decorators import method_decorator
-from django.views.decorators.http import require_GET
 
 from bookwyrm import models
 
@@ -20,10 +19,7 @@ class Export(View):
         """Request csv file"""
         return TemplateResponse(request, "preferences/export.html")
 
-
+    def post(self, request):
-@login_required
-@require_GET
-def export_user_book_data(request):
         """Streaming the csv file of a user's book data"""
         data = (
             models.Edition.viewer_aware_objects(request.user)
@@ -47,7 +43,9 @@ def export_user_book_data(request):
         return StreamingHttpResponse(
             (writer.writerow(row) for row in generator),
             content_type="text/csv",
-        headers={"Content-Disposition": 'attachment; filename="bookwyrm-export.csv"'},
+            headers={
+                "Content-Disposition": 'attachment; filename="bookwyrm-export.csv"'
+            },
         )