From 66ec98b129d2dcf6be6b32669f3e39b8385ba2e0 Mon Sep 17 00:00:00 2001 From: Ricky Rosario Date: Mon, 25 Apr 2011 17:09:30 -0400 Subject: [PATCH] Updated readme to note that CsrfMiddleware must be listed after AuthenticationMiddleware. --- README.rst | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.rst b/README.rst index 4919449..20c6b5b 100644 --- a/README.rst +++ b/README.rst @@ -29,9 +29,12 @@ Replace ``django.core.context_processors.csrf`` with ) Replace ``django.middleware.csrf.CsrfViewMiddleware`` with -``session_csrf.CsrfMiddleware`` in your ``MIDDLEWARE_CLASSES``:: +``session_csrf.CsrfMiddleware`` in your ``MIDDLEWARE_CLASSES`` +and make sure it is listed after the AuthenticationMiddleware:: MIDDLEWARE_CLASSES = ( + ... + 'django.contrib.auth.middleware.AuthenticationMiddleware', ... 'session_csrf.CsrfMiddleware', ...