From a323901d0e3ba8f4a82ec9703554e79d4eb557e5 Mon Sep 17 00:00:00 2001
From: Christophe Siraut <d@tobald.eu.org>
Date: Wed, 24 Jul 2024 10:27:42 +0200
Subject: [PATCH] templates/nav.html: logout view expects post requests

---
 aircox/templates/aircox/widgets/nav.html | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/aircox/templates/aircox/widgets/nav.html b/aircox/templates/aircox/widgets/nav.html
index a6c7ae5..937226d 100644
--- a/aircox/templates/aircox/widgets/nav.html
+++ b/aircox/templates/aircox/widgets/nav.html
@@ -3,7 +3,7 @@
     <div class="dropdown-trigger">
         <button class="button square" aria-haspopup="true" aria-controls="dropdown-menu" type="button">
             <span class="icon">
-                <i class="fa fa-user" aria-hidden="true"></i>
+                <i class="fa-regular fa-user" aria-hidden="true" style="opacity: 0.6"></i>
             </span>
         </button>
     </div>
@@ -40,11 +40,16 @@
                 {% translate "Statistics" %}
             </a>
             {% endblock %}
-            <hr class="dropdown-divider" />
             {% endif %}
-            <a class="dropdown-item" href="{% url "logout" %}" data-force-reload="1">
-                {% translate "Disconnect" %}
-            </a>
+            {% if user.is_authenticated %}
+            <hr class="dropdown-divider" />
+            <form id="logout" action="{% url 'logout' %}" method="post">
+                    {% csrf_token %}
+                    <a class="dropdown-item" href="#" type="submit" onclick="document.getElementById('logout').submit();">
+                        {% translate "Disconnect" %}
+                    </a>
+            </form>
+            {% endif %}
         </div>
     </div>
 </div>