diff options
Diffstat (limited to 'docs/ref')
| -rw-r--r-- | docs/ref/middleware.txt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/ref/middleware.txt b/docs/ref/middleware.txt index db70a7c14d..99ff001954 100644 --- a/docs/ref/middleware.txt +++ b/docs/ref/middleware.txt @@ -458,6 +458,10 @@ Here are some hints about the ordering of various Django middleware classes: Before any view middleware that assumes that CSRF attacks have been dealt with. + Before :class:`~django.contrib.auth.middleware.RemoteUserMiddleware`, or any + other authentication middleware that may perform a login, and hence rotate + the CSRF token, before calling down the middleware chain. + After ``SessionMiddleware`` if you're using :setting:`CSRF_USE_SESSIONS`. #. :class:`~django.contrib.auth.middleware.AuthenticationMiddleware` |