Merge lp:~fgallina/rnr-server/csrf-fix into lp:rnr-server

[Fabián Ezequiel Gallina]

Include CSRF Token in admin custom login template form

[Matias Bordese (matiasb)]

LGTM

review: Approve

=== modified file 'django_project/templates/admin/login.html'
--- django_project/templates/admin/login.html	2014-01-02 15:49:17 +0000
+++ django_project/templates/admin/login.html	2014-07-29 12:22:29 +0000
@@ -15,6 +15,7 @@
 {% endif %}
 <div id="content-main">
   <form name="fopenid" action="/openid/login/" method="post">
+    {% csrf_token %}
     <input type="hidden" name="next" value="{{ app_path }}" />
     <div class="form-row">
       {{ form.openid_identifier }}

=== added file 'src/reviewsapp/tests/test_admin.py'
--- src/reviewsapp/tests/test_admin.py	1970-01-01 00:00:00 +0000
+++ src/reviewsapp/tests/test_admin.py	2014-07-29 12:22:29 +0000
@@ -0,0 +1,23 @@
+from reviewsapp.tests.factory import TestCaseWithFactory
+
+
+class AdminViewConfigurationTestCase(TestCaseWithFactory):
+    """Ensure there are no configuration issues with the admin site."""
+
+    def setUp(self):
+        super(AdminViewConfigurationTestCase, self).setUp()
+
+    def test_login(self):
+        response = self.client.get("/admin/reviewsapp/review/")
+        self.assertTemplateUsed(response, 'admin/login.html')
+
+    def test_login_form_contains_csrf_token(self):
+        response = self.client.get("/admin/reviewsapp/review/")
+
+        self.assertIn('csrftoken', response.cookies)
+
+        csrftoken = response.cookies['csrftoken'].value
+        tag = ("<input type='hidden' "
+               "name='csrfmiddlewaretoken' value='%s' />") % csrftoken
+
+        self.assertContains(response, tag)