#37017: alogout() doesn't clear request.user
-------------------------------------+-------------------------------------
Reporter: Jacob Walls | Owner: Jacob
| Walls
Type: Bug | Status: closed
Component: contrib.auth | Version: 6.0
Severity: Release blocker | Resolution: fixed
Keywords: not-security | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Comment (by Jacob Walls <jacobtylerwalls@…>):
In [changeset:"a5c28dc1d7606f11adb932d0bd4dba899a028007" a5c28dc]:
{{{#!CommitTicketReference repository=""
revision="a5c28dc1d7606f11adb932d0bd4dba899a028007"
[6.0.x] Fixed #37017 -- Fixed setting or clearing of request.user after
alogin/alogout().
Regression in 31a43c571f4d036827d4fd7a5f615591637dc1be.
Backport of a32c7075cf634aee1f4f3deecd27f194097ec0c2 from main.
}}}
--
Ticket URL: <https://code.djangoproject.com/ticket/37017#comment:6>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion visit
https://groups.google.com/d/msgid/django-updates/0107019d4e49e128-9107455b-286e-4863-82ce-643512da549e-000000%40eu-central-1.amazonses.com.