SCAuth icon indicating copy to clipboard operation
SCAuth copied to clipboard

Make User checks optional and fix a problem posting to Django when CSRF is in use

Open awk opened this issue 14 years ago • 0 comments

If SCAuthUserCheckURL is set to 'disabled' do not perform the GET to check for a valid user. This effectively disables the register during logon behaviour for new users.

If a 'csrftoken' cookie is present supply its value in the X-CSRFToken header for POSTs made during login. This fixes a problem in DJango when the CSRF middleware is enabled and allows the posted to JSON data to be handled correctly.

awk avatar Apr 02 '11 21:04 awk