{cgi,cmd-cgi,httpauth}.py: Check request methods on CGI commands.

[chopwood] / httpauth.py

diff --git a/httpauth.py b/httpauth.py
index 383bdb1..7fdc687 100644 (file)
--- a/httpauth.py
+++ b/httpauth.py
@@ -332,6 +332,7 @@ def cmd_login(why = None):
 @CGI.subcommand(
   'auth', ['cgi-noauth'],
   'Verify a user name and password',
+  methods = ['POST'],
   params = [SC.Arg('u'), SC.Arg('pw')])
 def cmd_auth(u, pw):
   svc = S.SERVICES['master']