-
-
Notifications
You must be signed in to change notification settings - Fork 121
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Logout with DELETE verb by default #161
Logout with DELETE verb by default #161
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good change to stay with defaults
10c6fc8
to
7bf7d62
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@kennyadsl thank you! 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me! Thanks @kennyadsl
I'm not sure about backward compatibility here and I'm not super sure what to do, leaving WIP for now, please do not merge yet. |
This changed in Devise and we did not reflect this change over here. This commit will change how sign out works, so if users are manually using the GET verb to sign out users they will have to change it manually.
At the moment we are only supporting usign GET but the frontend routes allow customizing it using Devise.sign_out_via preference.
following value of Devise.sign_out_via preference
7bf7d62
to
1ecfbca
Compare
We discussed this in the core team meeting and we are fine merging this as is and releasing a new version. |
A while ago Devise changed the default HTTP verb used to sign out from
GET
toDELETE
.This PR re-aligns this preference default with what is shipped with Devise. It also improves the code to be more dynamic since we were not really supporting changing that preference.
🚨Can be breaking 🚨
Stores that rely on signing out with
GET
verb will need to change theDevise.sign_out_via
configuration atconfig/initializers/devise.rb
: