From eb07b5be0ce7c51938ed9b00bae04ebe9a75110c Mon Sep 17 00:00:00 2001 From: René Fleschenberg Date: Thu, 27 Feb 2020 17:55:29 +0100 Subject: Fixed #15619 -- Deprecated log out via GET requests. Thanks Florian Apolloner for the implementation idea. Co-Authored-By: Mariusz Felisiak --- docs/topics/auth/default.txt | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) (limited to 'docs/topics') diff --git a/docs/topics/auth/default.txt b/docs/topics/auth/default.txt index bef1486cdd..3e319560fb 100644 --- a/docs/topics/auth/default.txt +++ b/docs/topics/auth/default.txt @@ -1160,7 +1160,12 @@ implementation details see :ref:`using-the-views`. .. class:: LogoutView - Logs a user out. + Logs a user out on ``POST`` requests. + + .. deprecated:: 4.1 + + Support for logging out on ``GET`` requests is deprecated and will be + removed in Django 5.0. **URL name:** ``logout`` @@ -1212,7 +1217,7 @@ implementation details see :ref:`using-the-views`. .. function:: logout_then_login(request, login_url=None) - Logs a user out, then redirects to the login page. + Logs a user out on ``POST`` requests, then redirects to the login page. **URL name:** No default URL provided @@ -1221,6 +1226,11 @@ implementation details see :ref:`using-the-views`. * ``login_url``: The URL of the login page to redirect to. Defaults to :setting:`settings.LOGIN_URL ` if not supplied. + .. deprecated:: 4.1 + + Support for logging out on ``GET`` requests is deprecated and will be + removed in Django 5.0. + .. class:: PasswordChangeView **URL name:** ``password_change`` -- cgit v1.3