Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🐛 Removed method="post" on sign in/up forms in Admin #20598

Merged
merged 1 commit into from
Jul 11, 2024

Conversation

9larsons
Copy link
Contributor

ref https://linear.app/tryghost/issue/ONC-160

  • POST is incorrect as the form itself doesn't post to any path; all we want are the authentication flows to kick off on submit

We've had reports of users experiencing a 404 error on attempting to sign in to Ghost Admin (at /ghost/), where the login form seems to submit a POST request to the /ghost/ path (we don't have a route for that method, hence the 404; only GET). While I haven't been able to reproduce the issue, there's very few places in Ghost that actually issue a POST request.

Removing this method here has no impact to Ghost auth and may prevent some unexpected default behavior from the browser.

ref https://linear.app/tryghost/issue/ONC-160
- POST is incorrect as the form itself doesn't post to any path; all we want are the authentication flows to kick off on submit

We've had reports of users experiencing a 404 error on attempting to sign in to Ghost Admin (at /ghost/), where the login form seems to submit a POST request to the /ghost/ path (we don't have a route for that method, hence the 404; only GET). While I haven't been able to reproduce the issue, there's very few places in Ghost that actually issue a POST request.

Removing this method here has no impact to Ghost auth and may prevent some unexpected default behavior from the browser.
@github-actions github-actions bot added the affects:admin Anything relating to Ghost Admin label Jul 11, 2024
@9larsons 9larsons merged commit 3cfdcfb into main Jul 11, 2024
19 checks passed
@9larsons 9larsons deleted the remove-method-auth branch July 11, 2024 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
affects:admin Anything relating to Ghost Admin
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant