Chris Hill-Scott 5ab5a8a57f Make CSRF tokens last as long as the session ...

If you’re filling out a form then it should be possible to submit it for
as long as you’re logged in. We keep you logged in for quite a long time
now. This is partly for people using assistive tech, who might be slower
to fill in forms, and partly for people who get distracted in the middle
of a task and come back to it later.

The expiry on our CSRF tokens was more aggressive (3600 seconds – 1
hour) than our sessions. This commit sets the CSRF tokens to not expire,
so in effect they last as long as the session.

Also tweaks the config to have CSRF on locally (to replicate production
more closely) and only disable it for tests (because it’s a pain to
grab the tokens in tests).

2017-03-15 11:16:58 +00:00

..

assets

Make ‘by month’ heading bold on usage

2017-03-06 14:56:41 +00:00

main

Add logging for streaming contents

2017-03-13 14:53:19 +00:00

notify_client

Add logging for streaming contents

2017-03-13 14:53:19 +00:00

status

…

templates

Merge pull request #1170 from alphagov/feat-add-who-updated-providers

2017-03-08 16:43:07 +00:00

__init__.py

Fix HTML showing up on the breaking change page

2017-03-06 13:17:36 +00:00

.gitignore

Run on Paas

2017-01-17 11:44:42 +00:00

asset_fingerprinter.py

…

cloudfoundry_config.py

bump utils to 13.1.0

2017-01-17 11:44:42 +00:00

config.py

Make CSRF tokens last as long as the session

2017-03-15 11:16:58 +00:00

event_handlers.py

remove remember_me cookie and related code

2017-02-27 15:18:18 +00:00

its_dangerous_session.py

…

proxy_fix.py

…

statistics_utils.py

…

utils.py

Add logging for streaming contents

2017-03-13 14:53:19 +00:00

version.py.dist

…