darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-23 15:57:23 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1189 from alphagov/dont-expire-csrf

Browse Source 
Make CSRF tokens last as long as the session
This commit is contained in:
Chris Hill-Scott
2017-03-15 11:47:08 +00:00
committed by GitHub
parent 24b4b91e05 5ab5a8a57f
commit c5bd763953
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/config.py
View File

@@ -47,6 +47,7 @@ class Config(object):
SHOW_STYLEGUIDE = True SHOW_STYLEGUIDE = True
TOKEN_MAX_AGE_SECONDS = 3600 TOKEN_MAX_AGE_SECONDS = 3600
WTF_CSRF_ENABLED = True WTF_CSRF_ENABLED = True
WTF_CSRF_TIME_LIMIT = None
CSV_UPLOAD_BUCKET_NAME = 'local-notifications-csv-upload' CSV_UPLOAD_BUCKET_NAME = 'local-notifications-csv-upload'
DESKPRO_PERSON_EMAIL = 'donotreply@notifications.service.gov.uk' DESKPRO_PERSON_EMAIL = 'donotreply@notifications.service.gov.uk'
ACTIVITY_STATS_LIMIT_DAYS = 7 ACTIVITY_STATS_LIMIT_DAYS = 7
@@ -80,7 +81,6 @@ class Config(object):
class Development(Config): class Development(Config):
DEBUG = True DEBUG = True
SESSION_COOKIE_SECURE = False SESSION_COOKIE_SECURE = False
WTF_CSRF_ENABLED = False
SESSION_PROTECTION = None SESSION_PROTECTION = None
STATSD_ENABLED = False STATSD_ENABLED = False
CSV_UPLOAD_BUCKET_NAME = 'development-notifications-csv-upload' CSV_UPLOAD_BUCKET_NAME = 'development-notifications-csv-upload'
@@ -89,6 +89,7 @@ class Development(Config):
class Test(Development): class Test(Development):
DEBUG = True DEBUG = True
STATSD_ENABLED = True STATSD_ENABLED = True
WTF_CSRF_ENABLED = False
CSV_UPLOAD_BUCKET_NAME = 'test-notifications-csv-upload' CSV_UPLOAD_BUCKET_NAME = 'test-notifications-csv-upload'
NOTIFY_ENVIRONMENT = 'test' NOTIFY_ENVIRONMENT = 'test'