Hi,

I'm using LiveServerTestCase, as described 
here<http://chimera.labs.oreilly.com/books/1234000000754/ch17.html#_getting_the_ft_to_run_the_management_on_the_server>,
 
to automate remote staging testing my site which uses mezzanine 3.0.9.  The 
automated tests involve logging and out different users, sometimes quite 
rapidly.  When caching is turned on as per the settings in 
live_settings.py, I get CSRF errors on login. If I turn off caching to 
memcache, I don't get the errors.

I see that the UpdateCache middleware will go to cache if the user is 
anonymous.  At the time the user fills out the login form, they are 
anonymous.... so therefore the login page must be cached, which is causing 
my CSRF failures (?).  Unless I'm missing something, this is also true for 
the signup page.  It seems like this could be a problem if people submit, 
say, a login or signup form with errors, that then happens to get cached 
and shown to the next user.

Shouldn't there be a strategy to not cache these forms?

Jennifer

-- 
You received this message because you are subscribed to the Google Groups 
"Mezzanine Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to