#23939: SessionAuthenticationMiddleware causes "Vary: Cookie" header no matter 
what
---------------------------------+-------------------------------------
     Reporter:  andrewbadr       |                    Owner:  timgraham
         Type:  Bug              |                   Status:  closed
    Component:  contrib.auth     |                  Version:  1.7
     Severity:  Release blocker  |               Resolution:  fixed
     Keywords:  cookies          |             Triage Stage:  Accepted
    Has patch:  1                |      Needs documentation:  0
  Needs tests:  0                |  Patch needs improvement:  0
Easy pickings:  0                |                    UI/UX:  0
---------------------------------+-------------------------------------

Comment (by Tim Graham <timograham@…>):

 In [changeset:"99c0cc5300be21bd067aa9903b567ce64258942f"]:
 {{{
 #!CommitTicketReference repository=""
 revision="99c0cc5300be21bd067aa9903b567ce64258942f"
 [1.7.x] Fixed #23939 -- Moved session verification out of
 SessionAuthenticationMiddleware.

 Thanks andrewbadr for the report and Carl Meyer for the review.

 Backport of b06dfad88fb12a927c86a1eb23064201c9560fb1 from master
 }}}

--
Ticket URL: <https://code.djangoproject.com/ticket/23939#comment:17>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/068.12ce94ed752648223651cce061d4122f%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to