#28513: LogoutView doesn't support POST, unlike the function-based logout() view
---------------------------------+------------------------------------
Reporter: Paulo | Owner: nobody
Type: Bug | Status: new
Component: contrib.auth | Version: 1.11
Severity: Release blocker | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
---------------------------------+------------------------------------
Changes (by Tim Graham):
* component: Uncategorized => contrib.auth
* stage: Unreviewed => Accepted
* type: Uncategorized => Bug
* severity: Normal => Release blocker
Old description:
> Hello,
>
> On Django versions < 1.11, the logout view allowed us to use a POST
> request.
>
> Because no ''post'' method is defined on the new ''LogoutView''
> introduced in
> https://github.com/django/django/commit/78963495d0caadb77eb97ccf319ef0ba3b204fb5,
> a POST request will raise 405 Method not allowed error. I don't think
> POST was officially supported (don't see it in the docs) but there's code
> in the view that checks for the redirect field in the POST data.
New description:
The function-based `logout()` view allows using a POST request.
Because the new `LogoutView` introduced in
78963495d0caadb77eb97ccf319ef0ba3b204fb5 doesn't define a `post()` method,
a POST request returns "405 Method not allowed". I don't think POST was
officially supported (don't see it in the docs) but there's code in the
view that checks for the redirect field in the POST data.
--
Comment:
It seems reasonable to support that.
--
Ticket URL: <https://code.djangoproject.com/ticket/28513#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/066.5829962234209a90fa8131e289e6e972%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
