From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 4 Aug 2020 15:13:57 +0000 (+0000)
Subject: auth: Set Cache-Control: no-store when we don't want to cache
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6d66cec6a5f918b08e8f5a32c7e5f9805a0ae783;p=ipfire.org.git

auth: Set Cache-Control: no-store when we don't want to cache

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/web/auth.py b/src/web/auth.py
index 5594a6dd..d9bb703e 100644
--- a/src/web/auth.py
+++ b/src/web/auth.py
@@ -11,7 +11,7 @@ class CacheMixin(object):
 		if self.current_user:
 			self.add_header("Cache-Control", "private")
 
-		self.add_header("Vary", "Cookie")
+		self.add_header("Cache-Control", "no-store")
 
 
 class AuthenticationMixin(CacheMixin):