Django 5.0 forces POST method for logouts

tests/test_views_login.py

@@ -684,7 +684,7 @@ def test_with_remember(self):
         self.assertEqual(1, len([cookie for cookie in response.cookies if cookie.startswith('remember-cookie_')]))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
         response = self.client.get('/secure/raises/')
         self.assertEqual(response.status_code, 403)
 
@@ -733,7 +733,7 @@ def test_without_remember(self):
         self.assertEqual(0, len([cookie for cookie in response.cookies if cookie.startswith('remember-cookie_')]))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
         response = self.client.get('/secure/raises/')
         self.assertEqual(response.status_code, 403)
 
@@ -758,7 +758,7 @@ def test_expired(self):
         self.assertEqual(1, len([cookie for cookie in response.cookies if cookie.startswith('remember-cookie_')]))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
         response = self.client.get('/secure/raises/')
         self.assertEqual(response.status_code, 403)
 
@@ -790,7 +790,7 @@ def test_wrong_signature(self):
         self.assertEqual(1, len([cookie for cookie in response.cookies if cookie.startswith('remember-cookie_')]))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
         response = self.client.get('/secure/raises/')
         self.assertEqual(response.status_code, 403)
 
@@ -822,7 +822,7 @@ def test_remember_token_throttling(self):
         self.assertEqual(1, len([cookie for cookie in response.cookies if cookie.startswith('remember-cookie_')]))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
 
         # Login having an invalid remember cookie
         self.set_invalid_remember_cookie()
@@ -877,7 +877,7 @@ def test_phonedevice_with_remember_cookie(self, mock_signal, fake):
         self.assertRedirects(response, resolve_url(settings.LOGIN_REDIRECT_URL))
 
         # Logout
-        self.client.get(reverse('logout'))
+        self.client.post(reverse('logout'))
 
         # Ask for SMS challenge
         response = self._post({'auth-username': '[email protected]',