settings: Enable CSRF protection middleware.

[matthijs/projects/dorestad-bookings.git] / settings.py

diff --git a/settings.py b/settings.py
index 7a10053a7c27dbf02022c8183deea39b0cb9fbb4..c6bd83d6a5771d0b205f27bd1cdade4fdd01d029 100644 (file)
--- a/settings.py
+++ b/settings.py
@@ -63,6 +63,7 @@ MIDDLEWARE_CLASSES = (
     'django.middleware.common.CommonMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
 )
 
 ROOT_URLCONF = 'dorestad-bookings.urls'
@@ -74,10 +75,28 @@ TEMPLATE_DIRS = (
     os.path.join(PROJECT_DIR, 'templates'),
 )
 
+LOGIN_URL = "/reserveren/login/"
+LOGIN_REDIRECT_URL = "/reserveren/"
+
 INSTALLED_APPS = (
+    'django.contrib.auth',
     'tickets',
 )
 
+TEMPLATE_CONTEXT_PROCESSORS = (
+    "django.core.context_processors.auth",
+    "django.core.context_processors.debug",
+    "django.core.context_processors.i18n",
+    "django.core.context_processors.media",
+    "django.core.context_processors.request",
+)
+
+# Allow authentication against the phpb user accounts
+
+AUTHENTICATION_BACKENDS = (
+    'dorestad-bookings.auth.PhpBBBackend',
+)
+
 # Import local settings, that are specific to this installation. These
 # can override any settings specified here.
 try: