fix(app): #19 logout is not allowed using get request (#20)

Logging out via GET requests to the built-in logout view is deprecated. Use POST requests instead.

jet/static/jet/css/_forms.scss

@@ -163,3 +163,23 @@ input[type=checkbox] {
 .selector {
   display: none;
 }
+
+
+#logout-form {
+  display: inline;
+  button {
+    display: block;
+    line-height: 30px;
+    line-height: 2.14286rem;
+    padding: 0 14px;
+    padding: 0 1rem;
+    color: #fff;
+    text-decoration: none;
+    background: transparent;
+    border: none;
+    cursor: pointer;
+    &:hover {
+      text-decoration: underline;
+    }
+  }
+}

jet/static/jet/js/src/layout-updaters/user-tools.js

@@ -21,7 +21,7 @@ UserToolsUpdater.prototype = {
                 }
             });
 
-        $usertools.find('a').each(function() {
+        $usertools.find('a, #logout-form').each(function() {
             var $link = $(this);
             $('<li>').addClass('user-tools-link').html($link).appendTo($list);
         });

jet/templates/admin/base.html

@@ -73,7 +73,10 @@
                     {% if user.has_usable_password %}
                     <a href="{% url 'admin:password_change' %}">{% trans 'Change password' %}</a> /
                     {% endif %}
-                    <a href="{% url 'admin:logout' %}">{% trans 'Log out' %}</a>
+                    <form id="logout-form" method="post" action="{% url 'admin:logout' %}">
+                        {% csrf_token %}
+                        <button type="submit">{% translate "Log out" %}</button>
+                    </form>
                 {% endblock %}
             </div>
             {% endif %}

setup.py

@@ -28,7 +28,7 @@ def get_install_requires():
 
 setup(
     name='django-jet-calm',
-    version='5.3.0',
+    version='5.3.1',
     description='Modern template for Django-4 admin interface with improved functionality',
     long_description=read('README.rst'),
     author='Akshara Hegde',