Opened 8 years ago
Last modified 8 years ago
#28513 closed Bug
django 1.11 doesn't support POST for logout view — at Initial Version
| Reported by: | Paulo | Owned by: | nobody | 
|---|---|---|---|
| Component: | contrib.auth | Version: | 1.11 | 
| Severity: | Release blocker | Keywords: | |
| Cc: | Triage Stage: | Ready for checkin | |
| Has patch: | yes | Needs documentation: | no | 
| Needs tests: | no | Patch needs improvement: | no | 
| Easy pickings: | no | UI/UX: | no | 
Description
Hello,
On Django versions < 1.11, the logout view allowed us to use a POST request.
Because no post method is defined on the new LogoutView introduced in https://github.com/django/django/commit/78963495d0caadb77eb97ccf319ef0ba3b204fb5, a POST request will raise 405 Method not allowed error. I don't think POST was officially supported (don't see it in the docs) but there's code in the view that checks for the redirect field in the POST data. 
  Note:
 See   TracTickets
 for help on using tickets.