auth: Do not cache registration page because of XSRF cookie

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/web/auth.py b/src/web/auth.py
index 56f4b32f211a4aa9ecfade330f5a3386250f3af5..a81b6f263139b7769dc2aeaf32c05d9ddc9b8bed 100644 (file)
--- a/src/web/auth.py
+++ b/src/web/auth.py
@@ -81,7 +81,7 @@ class LogoutHandler(AuthenticationMixin, base.BaseHandler):
                self.redirect("/")
 
 
-class RegisterHandler(base.BaseHandler):
+class RegisterHandler(CacheMixin, base.BaseHandler):
        def get(self):
                # Redirect logged in users away
                if self.current_user:
@@ -143,7 +143,7 @@ class ActivateHandler(AuthenticationMixin, base.BaseHandler):
                self.render("auth/activated.html", account=account)
 
 
-class PasswordResetInitiationHandler(base.BaseHandler):
+class PasswordResetInitiationHandler(CacheMixin, base.BaseHandler):
        def get(self):
                username = self.get_argument("username", None)