fix: Django 5 only allows POST requests to log out (#7728)

fsbraun · web-flow · commit c3eb30cffcd2 · 2023-12-23T20:26:55.000+01:00
* Django 5 only allows POST requests to log out

* Update test
diff --git a/cms/cms_toolbars.py b/cms/cms_toolbars.py
@@ -23,6 +23,7 @@
 from cms.toolbar_base import CMSToolbar
 from cms.toolbar_pool import toolbar_pool
 from cms.utils import get_language_from_request, page_permissions
+from cms.utils.compat import DJANGO_4_2
 from cms.utils.conf import get_cms_setting
 from cms.utils.i18n import get_language_dict, get_language_tuple
 from cms.utils.page_permissions import (
@@ -343,7 +344,7 @@ def add_logout_button(self, parent):
             action=admin_reverse('logout'),
             active=True,
             on_success=on_success,
-            method='GET',
+            method='POST',
         )
 
     def add_language_menu(self):
diff --git a/cms/tests/test_toolbar.py b/cms/tests/test_toolbar.py
@@ -630,7 +630,7 @@ def test_hide_toolbar_login_anonymous_setting(self):
     def test_admin_logout_staff(self):
         with override_settings(CMS_PERMISSION=True):
             with self.login_user_context(self.get_staff()):
-                response = self.client.get('/en/admin/logout/')
+                response = self.client.post('/en/admin/logout/')
                 self.assertTrue(response.status_code, 200)
 
     def test_show_toolbar_without_edit(self):
