From 6d66cec6a5f918b08e8f5a32c7e5f9805a0ae783 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 4 Aug 2020 15:13:57 +0000 Subject: [PATCH] auth: Set Cache-Control: no-store when we don't want to cache Signed-off-by: Michael Tremer --- src/web/auth.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/web/auth.py b/src/web/auth.py index 5594a6dd..d9bb703e 100644 --- a/src/web/auth.py +++ b/src/web/auth.py @@ -11,7 +11,7 @@ class CacheMixin(object): if self.current_user: self.add_header("Cache-Control", "private") - self.add_header("Vary", "Cookie") + self.add_header("Cache-Control", "no-store") class AuthenticationMixin(CacheMixin): -- 2.47.3