Skip to content

Conversation

07SUJITH
Copy link
Contributor

@07SUJITH 07SUJITH commented Jun 8, 2025

Issue: Logout via GET is no longer allowed from Django 4.1 onwards.
🔗 Ref: Django 4.1 Release Notes – logout via GET

Fix: Updated logout links in all language versions of the tutorial to use a POST form.

Before

<a href="{% url 'logout' %}">Log out</a>

After

<form method="POST" action="{% url 'logout' %}" style="display:inline;">
  {% csrf_token %}
  <button type="submit" style="padding:0; border:none; background:none; color:#337ab7; text-decoration:underline; cursor:pointer;">
    Log out
  </button>
</form>

Updated Files

  • en/authentication_authorization/README.md
  • es/authentication_authorization/README.md
  • fa/authentication_authorization/README.md
  • ja/authentication_authorization/README.md
  • co/authentication_authorization/README.md

Ensures compatibility with Django 4.1+ and maintains secure logout practice.


Fixes: #183

…Django 4.1+)

Replaced logout <a> link with a POST form to comply with Django 4.1+ security policy,
which disallows logout via GET request.

Modified Files:
- tutorial-extensions/en/authentication_authorization/README.md
- tutorial-extensions/es/authentication_authorization/README.md
- tutorial-extensions/fa/authentication_authorization/README.md
- tutorial-extensions/ja/authentication_authorization/README.md
- tutorial-extensions/co/authentication_authorization/README.md

Fixes DjangoGirls#183
@07SUJITH
Copy link
Contributor Author

Hi @das-g,

Could you please review the PR addressing the logout via POST issue for Django 4.1+ (Fixes #183)? This update aligns with the main tutorial's Django~=5.1.2 version, ensuring compatibility by disabling logout via GET.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant