Revision 327a4c1e

b/snf-astakos-app/astakos/im/static/im/css/modules.css
595 595
.auth_methods .assigned, 
596 596
.auth_methods .notassigned						{ margin-bottom:40px; }
597 597
.auth_methods .assigned span.details			{   color:grey; display:inline-block; max-width:400px;  vertical-align:middle; position:absolute; left:140px; top:13px;}
598
.auth_methods .dialog-wrap form 				{ display: inline-block;}
599
.auth_methods .dialog-wrap form input[type="submit"]	{ margin:0 20px 0 0;}
600
.auth_methods .dialog-wrap form +.submit 		{ height:23px; position: relative;top:-1px;}
598 601
#token-confirm									{ display:none; position:absolute; left:550px; top:-10px; }
599 602
/* login section */
600 603
.login-section {}
b/snf-astakos-app/astakos/im/templates/im/profile_auth_methods.html
30 30
                <p>Are you sure you want to change {{ userauthprovider.get_method_prompt_msg }}?</p> 
31 31
                {% endif %}
32 32
                {% if userauthprovider.get_remove_policy %}
33
                <p><a href="{{ userauthprovider.get_remove_url }}"
34
                  class="submit">Yes</a>
33
                <form action="{{ userauthprovider.get_remove_url }}" method="post">{% csrf_token %}
34
                  <input type="submit" value="YES" />
35
                </form>  
35 36
                <a href="#" class="no submit">No</a>
36
                </p>
37 37
                {% else %}
38 38
                <p><a href="{{ userauthprovider.get_switch_url }}"
39 39
                  class="submit">Yes</a>
......
77 77
              </span>
78 78
              <div class="dialog-wrap">
79 79
                <p>Are you sure you want to remove {{ userauthprovider.get_method_prompt_msg }}?</p> 
80
                <p><a href="{{ userauthprovider.get_remove_url }}"
81
                  class="submit">Yes</a>
80
                <form action="{{ userauthprovider.get_remove_url }}" method="post">{% csrf_token %}
81
                  <input type="submit" value="YES" />
82
                </form>  
82 83
                <a href="#" class="no submit">No</a>
83
                </p>
84 84
              </div>	
85 85
              {% else %}
86 86
              <a href="javascript:void(0);" class="noaction" 
b/snf-astakos-app/astakos/im/views/im.py
782 782

  
783 783

  
784 784
# TODO: action only on POST and user should confirm the removal
785
@require_http_methods(["GET", "POST"])
785
@require_http_methods(["POST"])
786 786
@cookie_fix
787 787
@valid_astakos_user_required
788 788
def remove_auth_provider(request, pk):

Also available in: Unified diff