perf: delete_test_cookie

2021-03-22 18:00:06 +08:00 · 2021-03-22 18:00:06 +08:00 · e2b7c902a5
parent 4055306cf8
commit e2b7c902a5
1 changed files with 3 additions and 0 deletions
--- a/apps/authentication/views/login.py
+++ b/apps/authentication/views/login.py
@ -55,6 +55,9 @@ class UserLoginView(mixins.AuthMixin, FormView):
    def form_valid(self, form):
        if not self.request.session.test_cookie_worked():
            return HttpResponse(_("Please enable cookies and try again."))
+        # https://docs.djangoproject.com/en/3.1/topics/http/sessions/#setting-test-cookies
+        self.request.session.delete_test_cookie()
+
        try:
            self.check_user_auth(decrypt_passwd=True)
        except errors.AuthFailedError as e: