From e72c1ef8ee850e652b75c409acfc58f4a850993a Mon Sep 17 00:00:00 2001
From: smolkik-code <mishel.smolin@yandex.ru>
Date: Wed, 17 Jun 2026 14:47:03 +0700
Subject: [PATCH] fix: add X-CSRFToken header for POST requests

Instagram requires CSRF token from cookies for POST endpoints like reels_media
---
 instagram_monitor.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/instagram_monitor.py b/instagram_monitor.py
index fa2c096..969553b 100644
--- a/instagram_monitor.py
+++ b/instagram_monitor.py
@@ -134,6 +134,12 @@ class InstagramMonitor:
             logger.info(f"Cookies loaded: ds_user_id={ds_user_id}")
             self._own_user_id = int(ds_user_id)
 
+            # Set CSRF token from cookies for POST requests
+            csrf = self.session.cookies.get("csrftoken", "")
+            if csrf:
+                self.session.headers["X-CSRFToken"] = csrf
+                logger.info(f"CSRF token set")
+
             resp = self.session.get(
                 f"{API_BASE}/friendships/{ds_user_id}/following/",
                 params={"count": 1},