Re: Custom login in django

[Will Meyers]

We'd need more info, but most likely the actual token is not being sent to
the template properly. See this

thread for suggestions.

On Mon, Mar 30, 2020 at 11:18 AM Kushal Neupane  wrote:

> Forbidden (403)
>
> CSRF verification failed. Request aborted.
> Help
>
> Reason given for failure:
>
> CSRF token missing or incorrect.
>
>
> In general, this can occur when there is a genuine Cross Site Request
> Forgery, or when Django's CSRF mechanism
>  has not been used
> correctly. For POST forms, you need to ensure:
>
>- Your browser is accepting cookies.
>- The view function passes a request to the template's render
>
> 
>method.
>- In the template, there is a {% csrf_token %} template tag inside
>each POST form that targets an internal URL.
>- If you are not using CsrfViewMiddleware, then you must use
>csrf_protect on any views that use the csrf_token template tag, as
>well as those that accept the POST data.
>- The form has a valid CSRF token. After logging in in another browser
>tab or hitting the back button after a login, you may need to reload the
>page with the form, because the token is rotated after a login.
>
> You're seeing the help section of this page because you have DEBUG = True
> in your Django settings file. Change that to False, and only the initial
> error message will be displayed.
>
> You can customize this page using the CSRF_FAILURE_VIEW setting.
>
> [image: Capture.PNG]
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/7de9d86d-5607-43c5-8462-185a04bcc648%40googlegroups.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CACCQDfDo64nJnPgMG%3DdX93wHAbkWUyjyTTtXQdptPJn6jLZQzg%40mail.gmail.com.

Re: Custom login in django

[Kasper Laudrup]

https://stackoverflow.com/help/how-to-ask

--
You received this message because you are subscribed to the Google Groups "Django 
users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/1f83fadc-9ec1-dfc1-82b2-eb4178e109a7%40stacktrace.dk.

Custom login in django

[Kushal Neupane]

 Forbidden (403) 

CSRF verification failed. Request aborted.
Help 

Reason given for failure:

CSRF token missing or incorrect.


In general, this can occur when there is a genuine Cross Site Request 
Forgery, or when Django's CSRF mechanism 
 has not been used 
correctly. For POST forms, you need to ensure:

   - Your browser is accepting cookies.
   - The view function passes a request to the template's render 
   

 
   method.
   - In the template, there is a {% csrf_token %} template tag inside each 
   POST form that targets an internal URL.
   - If you are not using CsrfViewMiddleware, then you must use csrf_protect 
   on any views that use the csrf_token template tag, as well as those that 
   accept the POST data.
   - The form has a valid CSRF token. After logging in in another browser 
   tab or hitting the back button after a login, you may need to reload the 
   page with the form, because the token is rotated after a login.

You're seeing the help section of this page because you have DEBUG = True 
in your Django settings file. Change that to False, and only the initial 
error message will be displayed. 

You can customize this page using the CSRF_FAILURE_VIEW setting.

[image: Capture.PNG]


-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/7de9d86d-5607-43c5-8462-185a04bcc648%40googlegroups.com.

How to make a custom login() using Django login() method?

[Susan Tan]

Hi Django Users,

This is my first-time post.

I want to return my own SusanTemplateResponse class in
https://github.com/django/django/blob/stable/1.10.x/django/contrib/auth/views.py#L98
 

instead of the default Django "TemplateResponse" that gets returned. What 
is a good way
to do that? 

SusanTemplateResponse is my version of django.template.repsonseimport 
TemplateResponse.

I'm using Django 1.10.

Susan Tan

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/d730820f-6ee9-4e8a-8f3d-107373cbd3b2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Custom Login Url Django Admin Site

[d3f3nd3r]

Hi,

is there a nice way to redirect the user to a custom login page when
accessing a django admin site?

I'm thinking about something like LOGIN_URL in settings.py.

regards

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-us...@googlegroups.com.
To unsubscribe from this group, send email to 
django-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en.