You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In Apache Airflow, we have a use case for protecting the logout route from CSRF attacks (apache/airflow#33030), and for that we need to convert the methods of logout route in AuthView to ["POST"] only. As we use the default configuration, we need to override the method manually which is a bit hacky.
It would be nice if we could make the login and logout methods in AuthView configurable, somewhat like the following snippet:
In Apache Airflow, we have a use case for protecting the
logout
route from CSRF attacks (apache/airflow#33030), and for that we need to convert the methods oflogout
route inAuthView
to["POST"]
only. As we use the default configuration, we need to override the method manually which is a bit hacky.It would be nice if we could make the
login
andlogout
methods inAuthView
configurable, somewhat like the following snippet:The text was updated successfully, but these errors were encountered: