tighten login csrf protection by using a login timeout #231

	name: checks
	on:
	- push
	- pull_request
	- workflow_dispatch

	jobs:
	check-pre-commit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- uses: actions/setup-python@v4
	with:
	python-version: 3.x
	cache: pip
	cache-dependency-path: \|
	pyproject.toml
	requirements.dev.txt
	- run: \|
	pip install pre-commit
	pip install -e .
	pip install -r requirements.dev.txt
	- uses: actions/cache@v3
	with:
	path: ~/.cache/pre-commit
	key: pre-commit\|${{ env.pythonLocation }}\|${{ hashFiles('.pre-commit-config.yaml') }}
	- run: pre-commit run --show-diff-on-failure --color=always --all-files

	test:
	name: test py=${{ matrix.py_version }} django=${{ matrix.django_version }} drf=${{ matrix.drf_version }}
	strategy:
	fail-fast: false
	matrix:
	py_version: ["3.9", "3.10", "3.11"]
	drf_version: ["3.13", "3.14"]
	django_version:
	- "3.2" # LTS
	- "4.2" # LTS
	- "5.0" # current
	exclude:
	# django 5.0 requires python >3.9
	- py_version: "3.9"
	django_version: "5.0"
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- uses: actions/setup-python@v4
	with:
	python-version: "${{ matrix.py_version }}"
	cache: pip
	cache-dependency-path: \|
	pyproject.toml
	requirements.dev.txt
	- name: Install dependencies
	run: \|
	pip install .[django,djangorestframework] -r requirements.dev.txt django==${{ matrix.django_version }} djangorestframework==${{ matrix.drf_version }}
	- name: Run tests
	run: pytest

Provide feedback