Login into admin does not close the microsoft window and does not reload the page.

Hi,

I just set up microsoft login. I try to login into django admin. The user was created by the plugin and I already gave him staff and admin permission by using a superuser. But the moment the microsoft login is completed, the window shows:

This window should automatically close. If it does not, it should be save to close after a few seconds.
{"microsoft_auth": {}}

But:

• The window does not close.
• If I close the window manually the login page does nothing. It does not automatically refresh.

If close manually and afterwards refresh manually the user is logged in. But that can’t be the way a user should log in.

[Casey-Kiewit]

I did some digging into this. Django 4.0 added a security feature that breaks how this page was working. This change causes these two lines to error since window.opener is null.

[bartTC]

The solution in in the documentation link above. Set

# settings.py
SECURE_CROSS_ORIGIN_OPENER_POLICY = "none"

https://docs.djangoproject.com/en/4.1/ref/middleware/#cross-origin-opener-policy https://docs.djangoproject.com/en/4.1/ref/settings/#std-setting-SECURE_CROSS_ORIGIN_OPENER_POLICY