moritz/coinmanager
1
0
Fork 0
Code Issues 22 Pull Requests Releases Wiki Activity

caching login related #51

New Issue
Closed
opened 2022-01-09 17:04:45 +01:00 by moritz · 1 comment
moritz commented 2022-01-09 17:04:45 +01:00
Owner
Copy Link

the caching and the login mechanism interfere witch each other. this is more compley than i initially thought.

  1. "etag" and "last modified" headers which basically prevent the browser to reload a page when the header did not change.

  2. django settings specific config, i.e. a file based cache which definetly imposes problems with the login mechanism, this should be turned off entirely

  3. the csrf middleware token does somehow get cached by 1. and/or 2. which makes it impossible to login or to add/modify a new coin.

For simplicity all caching features should be disabled and then the csrf-token-problem might be investigated. it is no option to turn off csrf protection as it seems to bee really hard-coded into django ant there is no simple option to just turn it completely off...

  • completely remove etag headers
  • completely remove backed-based caching
  • fix csrf-token not identified
the caching and the login mechanism interfere witch each other. this is more compley than i initially thought. 1. "etag" and "last modified" headers which basically prevent the browser to reload a page when the header did not change. 2. django settings specific config, i.e. a file based cache which definetly imposes problems with the login mechanism, this should be turned off entirely 3. the csrf middleware token does somehow get cached by 1. and/or 2. which makes it impossible to login or to add/modify a new coin. For simplicity all caching features should be disabled and then the csrf-token-problem might be investigated. it is no option to turn off csrf protection as it seems to bee really hard-coded into django ant there is no simple option to just turn it completely off... - [x] completely remove etag headers - [x] completely remove backed-based caching - [x] fix csrf-token not identified
moritz added this to the 2.0 Happy Bday 2 milestone 2022-01-09 17:04:45 +01:00
moritz added the
bug
 label 2022-01-09 17:04:45 +01:00
moritz self-assigned this 2022-01-09 17:04:45 +01:00
moritz commented 2022-01-09 17:16:12 +01:00
Author
Owner
Copy Link

problem-timeline

  • 04.09.21 login does take some retrys
  • 04.10.21
    • last coin added
    • COMMITS
      • hope it works
      • fix broken things
      • remove coutry name iso argument as it is not needed, retype error message
  • 11.10.21 login does not work
  • 01.11.21
    • COMMITS
      • revert remove csrf token, get add/coin working again - refactored due to testing ...
  • 06.11.21 login does not work
# problem-timeline - 04.09.21 login does take some retrys - 04.10.21 - last coin added - COMMITS - hope it works - fix broken things - remove coutry name iso argument as it is not needed, retype error message - 11.10.21 login does not work - 01.11.21 - COMMITS - revert remove csrf token, get add/coin working again - refactored due to testing ... - 06.11.21 login does not work
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
+ logic
+ speed
bug
Something is not working
enhancement
New feature
idea
Idee
No Label
bug
Milestone
No items
No Milestone 2.0 Happy Bday 2
Assignees
Clear assignees
No Assignees moritz
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: moritz/coinmanager#51
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?