Opened 7 years ago
Last modified 7 years ago
#28513 closed Bug
LogoutView doesn't support POST, unlike the function-based logout() view — at Version 1
| Reported by: | Paulo | Owned by: | nobody |
|---|---|---|---|
| Component: | contrib.auth | Version: | 1.11 |
| Severity: | Release blocker | Keywords: | |
| Cc: | Triage Stage: | Ready for checkin | |
| Has patch: | yes | Needs documentation: | no |
| Needs tests: | no | Patch needs improvement: | no |
| Easy pickings: | no | UI/UX: | no |
Description (last modified by )
The function-based logout() view allows using a POST request.
Because the new LogoutView introduced in 78963495d0caadb77eb97ccf319ef0ba3b204fb5 doesn't define a post() method, a POST request returns "405 Method not allowed". I don't think POST was officially supported (don't see it in the docs) but there's code in the view that checks for the redirect field in the POST data.
Change History (1)
comment:1 by , 7 years ago
| Component: | Uncategorized → contrib.auth |
|---|---|
| Description: | modified (diff) |
| Severity: | Normal → Release blocker |
| Summary: | django 1.11 doesn't support POST for logout view → LogoutView doesn't support POST, unlike the function-based logout() view |
| Triage Stage: | Unreviewed → Accepted |
| Type: | Uncategorized → Bug |
Note:
See TracTickets
for help on using tickets.
It seems reasonable to support that.