darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-10 01:55:41 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1312 from alphagov/csrf-err

Browse Source 
Add better logging when CSRF handler fails
This commit is contained in:
Leo Hemsted
2017-06-13 09:44:29 +01:00
committed by GitHub
parent cafe946871 61ead87fc9
commit eb27a44d13
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/__init__.py
View File

@@ -165,14 +165,16 @@ def init_csrf(application):
@csrf.error_handler @csrf.error_handler
def csrf_handler(reason): def csrf_handler(reason):
application.logger.warning('csrf.error_message: {}'.format(reason))
if 'user_id' not in session: if 'user_id' not in session:
application.logger.info( application.logger.warning(
u'csrf.session_expired: Redirecting user to log in page' u'csrf.session_expired: Redirecting user to log in page'
) )
return application.login_manager.unauthorized() return application.login_manager.unauthorized()
application.logger.info( application.logger.warning(
u'csrf.invalid_token: Aborting request, user_id: {user_id}', u'csrf.invalid_token: Aborting request, user_id: {user_id}',
extra={'user_id': session['user_id']}) extra={'user_id': session['user_id']})