JwtAuthCookieMiddleware needs to come before AuthenticationMiddleware.
This commit is contained in:
@@ -478,6 +478,7 @@ MIDDLEWARE_CLASSES = [
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.middleware.csrf.CsrfViewMiddleware',
|
||||
'django.contrib.sites.middleware.CurrentSiteMiddleware',
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.JwtAuthCookieMiddleware',
|
||||
|
||||
# Allows us to define redirects via Django admin
|
||||
'django_sites_extensions.middleware.RedirectMiddleware',
|
||||
@@ -530,7 +531,6 @@ MIDDLEWARE_CLASSES = [
|
||||
'edx_rest_framework_extensions.middleware.RequestMetricsMiddleware',
|
||||
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.EnsureJWTAuthSettingsMiddleware',
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.JwtAuthCookieMiddleware',
|
||||
|
||||
# This must be last so that it runs first in the process_response chain
|
||||
'openedx.core.djangoapps.site_configuration.middleware.SessionCookieDomainOverrideMiddleware',
|
||||
|
||||
@@ -1221,6 +1221,7 @@ MIDDLEWARE_CLASSES = [
|
||||
'django_comment_client.middleware.AjaxExceptionMiddleware',
|
||||
'django.middleware.common.CommonMiddleware',
|
||||
'django.contrib.sites.middleware.CurrentSiteMiddleware',
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.JwtAuthCookieMiddleware',
|
||||
|
||||
# Allows us to define redirects via Django admin
|
||||
'django_sites_extensions.middleware.RedirectMiddleware',
|
||||
@@ -1298,7 +1299,6 @@ MIDDLEWARE_CLASSES = [
|
||||
'edx_rest_framework_extensions.middleware.RequestMetricsMiddleware',
|
||||
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.EnsureJWTAuthSettingsMiddleware',
|
||||
'edx_rest_framework_extensions.auth.jwt.middleware.JwtAuthCookieMiddleware',
|
||||
|
||||
# This must be last
|
||||
'openedx.core.djangoapps.site_configuration.middleware.SessionCookieDomainOverrideMiddleware',
|
||||
|
||||
Reference in New Issue
Block a user