Andal.LND/edx-platform
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make password reset endpoint CSRF exempt

Browse Source 
This is necessary for mobile apps
This commit is contained in:
Greg Price
2014-10-10 11:32:46 -04:00
parent e2fbc09d9d
commit a2f860740c
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
common/djangoapps/student/views.py
View File

@@ -29,6 +29,7 @@ from django_future.csrf import ensure_csrf_cookie
from django.utils.http import cookie_date, base36_to_int from django.utils.http import cookie_date, base36_to_int
from django.utils.translation import ugettext as _, get_language from django.utils.translation import ugettext as _, get_language
from django.views.decorators.cache import never_cache from django.views.decorators.cache import never_cache
from django.views.decorators.csrf import csrf_exempt
from django.views.decorators.http import require_POST, require_GET from django.views.decorators.http import require_POST, require_GET
from django.db.models.signals import post_save from django.db.models.signals import post_save
@@ -1829,7 +1830,7 @@ def activate_account(request, key):
return HttpResponse(_("Unknown error. Please e-mail us to let us know how it happened.")) return HttpResponse(_("Unknown error. Please e-mail us to let us know how it happened."))
@ensure_csrf_cookie @csrf_exempt
def password_reset(request): def password_reset(request):
""" Attempts to send a password reset e-mail. """ """ Attempts to send a password reset e-mail. """
if request.method != "POST": if request.method != "POST":