diff --git a/ChangeLog.md b/ChangeLog.md --- a/ChangeLog.md +++ b/ChangeLog.md @@ -1,3 +1,7 @@ +## 1.4.19 + +* Auth logout not working with defaultCsrfMiddleware [#1151](https://github.com/yesodweb/yesod/issues/1151) + ## 1.4.18.2 * Allow subsites within hierarchical routes [#1144](https://github.com/yesodweb/yesod/pull/1144) diff --git a/Yesod/Core/Handler.hs b/Yesod/Core/Handler.hs --- a/Yesod/Core/Handler.hs +++ b/Yesod/Core/Handler.hs @@ -890,6 +890,7 @@ -> m a redirectToPost url = do urlText <- toTextUrl url + req <- getRequest withUrlRenderer [hamlet| $newline never $doctype 5 @@ -899,6 +900,8 @@ Redirecting... <body onload="document.getElementById('form').submit()"> <form id="form" method="post" action=#{urlText}> + $maybe token <- reqToken req + <input type=hidden name=#{defaultCsrfParamName} value=#{token}> <noscript> <p>Javascript has been disabled; please click on the button below to be redirected. <input type="submit" value="Continue"> diff --git a/yesod-core.cabal b/yesod-core.cabal --- a/yesod-core.cabal +++ b/yesod-core.cabal @@ -1,5 +1,5 @@ name: yesod-core -version: 1.4.18.2 +version: 1.4.19 license: MIT license-file: LICENSE author: Michael Snoyman <michael@snoyman.com>