fix: remove is_secure() check (#7579)

The real work happened in a previous commit,
just nudging the patch version with this CC
message.
This commit is contained in:
Jennifer Richards 2024-06-21 11:50:35 -03:00 committed by GitHub
parent 1210d4282f
commit 6f4e328334
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -52,6 +52,8 @@ def notify(request, org, notification):
password = request.POST.get("password") or request.GET.get("password")
if username != None and password != None:
# Used to reject non-https traffic here, but that's now enforced by a domain-wide upgrade
# from http to https. Django's request.is_secure() is always False now.
if not user.is_authenticated:
try:
user = User.objects.get(username__iexact=username)