Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make User checks optional and fix a problem posting to Django when CSRF is in use #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

awk
Copy link

@awk awk commented Apr 2, 2011

If SCAuthUserCheckURL is set to 'disabled' do not perform the GET to check for a valid user.
This effectively disables the register during logon behaviour for new users.

If a 'csrftoken' cookie is present supply its value in the X-CSRFToken header for POSTs made
during login. This fixes a problem in DJango when the CSRF middleware is enabled and allows
the posted to JSON data to be handled correctly.

…check for a valid user.

This effectively disables the register during logon behaviour for new users.

If a 'csrftoken' cookie is present supply its value in the X-CSRFToken header for POSTs made
during login. This fixes a problem in DJango when the CSRF middleware is enabled and allows
the posted to JSON data to be handled correctly.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant