Skip to content

Commit

Permalink
feat(account/views): Add never_cache decorator to prevent csrf_token …
Browse files Browse the repository at this point in the history
…caching

* Add never_cache decorator to prevent csrf_token caching

* Apply isort for sorted imports

---------

Co-authored-by: varun kumar <varun.kumar@zenatix.com>
  • Loading branch information
varunsaral and varun kumar authored Aug 25, 2023
1 parent c52304f commit 8bb35a7
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions allauth/account/views.py
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@
from django.shortcuts import redirect
from django.urls import reverse, reverse_lazy
from django.utils.decorators import method_decorator
from django.views.decorators.cache import never_cache
from django.views.decorators.debug import sensitive_post_parameters
from django.views.generic.base import TemplateResponseMixin, TemplateView, View
from django.views.generic.edit import FormView
Expand Down Expand Up @@ -145,6 +146,7 @@ class LoginView(
redirect_field_name = "next"

@sensitive_post_parameters_m
@method_decorator(never_cache)
def dispatch(self, request, *args, **kwargs):
return super(LoginView, self).dispatch(request, *args, **kwargs)

Expand Down Expand Up @@ -230,6 +232,7 @@ class SignupView(
success_url = None

@sensitive_post_parameters_m
@method_decorator(never_cache)
def dispatch(self, request, *args, **kwargs):
return super(SignupView, self).dispatch(request, *args, **kwargs)

Expand Down

0 comments on commit 8bb35a7

Please sign in to comment.