diff options
| author | hui shang <shangdahao@gmail.com> | 2017-08-24 21:11:16 +0800 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2017-08-24 09:11:34 -0400 |
| commit | 58aaf13e759cf60f8eaab42f650921923fde6502 (patch) | |
| tree | a343e491a118c9c28f17419e0d3cff95461fbcef | |
| parent | 0d21bdd3805f5d3a37a02062a170cabe377aa8fe (diff) | |
[1.11.x] Fixed #28513 -- Added POST request support to LogoutView.
Backport of c0f4c60edd429f5ef57241cfabd159d13e26e5ac from master
| -rw-r--r-- | django/contrib/auth/views.py | 4 | ||||
| -rw-r--r-- | docs/releases/1.11.5.txt | 3 | ||||
| -rw-r--r-- | tests/auth_tests/test_views.py | 6 |
3 files changed, 13 insertions, 0 deletions
diff --git a/django/contrib/auth/views.py b/django/contrib/auth/views.py index 4c51281436..f8934e9edb 100644 --- a/django/contrib/auth/views.py +++ b/django/contrib/auth/views.py @@ -159,6 +159,10 @@ class LogoutView(SuccessURLAllowedHostsMixin, TemplateView): return HttpResponseRedirect(next_page) return super(LogoutView, self).dispatch(request, *args, **kwargs) + def post(self, request, *args, **kwargs): + """Logout may be done via POST.""" + return self.get(request, *args, **kwargs) + def get_next_page(self): if self.next_page is not None: next_page = resolve_url(self.next_page) diff --git a/docs/releases/1.11.5.txt b/docs/releases/1.11.5.txt index f650fe4b5a..baa327bc02 100644 --- a/docs/releases/1.11.5.txt +++ b/docs/releases/1.11.5.txt @@ -23,3 +23,6 @@ Bugfixes requires an update to Oracle tables created with Django 1.11.[1-4]. Use the upgrade script in :ticket:`28451` comment 8 to update sequence and trigger names to use the pre-1.11 naming scheme. + +* Added POST request support to ``LogoutView``, for equivalence with the + function-based ``logout()`` view (:ticket:`28513`). diff --git a/tests/auth_tests/test_views.py b/tests/auth_tests/test_views.py index 25b779f709..e2424a2b71 100644 --- a/tests/auth_tests/test_views.py +++ b/tests/auth_tests/test_views.py @@ -919,6 +919,12 @@ class LogoutTest(AuthViewsTestCase): self.assertContains(response, 'Logged out') self.confirm_logged_out() + def test_logout_with_post(self): + self.login() + response = self.client.post('/logout/') + self.assertContains(response, 'Logged out') + self.confirm_logged_out() + def test_14377(self): # Bug 14377 self.login() |