Opened 7 years ago

Last modified 7 years ago

#28513 closed Bug

django 1.11 doesn't support POST for logout view — at Initial Version

Reported by: Paulo Owned by: nobody
Component: contrib.auth Version: 1.11
Severity: Release blocker Keywords:
Cc: Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description

Hello,

On Django versions < 1.11, the logout view allowed us to use a POST request.

Because no post method is defined on the new LogoutView introduced in https://github.com/django/django/commit/78963495d0caadb77eb97ccf319ef0ba3b204fb5, a POST request will raise 405 Method not allowed error. I don't think POST was officially supported (don't see it in the docs) but there's code in the view that checks for the redirect field in the POST data.

Change History (0)

Note: See TracTickets for help on using tickets.
Back to Top