diff --git a/templates/account/login.html b/templates/account/login.html index bac47d9..65a094f 100644 --- a/templates/account/login.html +++ b/templates/account/login.html @@ -14,22 +14,21 @@

- {% comment %} - The button is a GET to allauth's google_login view -- not a POST form -- - because the actual OAuth handshake happens via a 302 redirect to Google. - The `?next=` from `/accounts/login/?next=/wherever/` is forwarded so the - user lands back on the page they were trying to reach. - {% endcomment %} - - - Continue with Google - + {# POST (not GET) so allauth's LoginView skips its intermediate confirm page and 302s straight to Google. #} +
+ {% csrf_token %} + {% if request.GET.next %}{% endif %} + +
No thanks, just submit as a guest →