Because the express.CRSF() middleware is no longer global, the routes created by express-persona must be updated to include the middleware.
Attachment #762923 - Flags: review?(chris)
Comment on attachment 762923 [details] [review] https://github.com/mozilla/login.webmaker.org/pull/104 solid.
Attachment #762923 - Flags: review?(chris) → review+
Commits pushed to master at https://github.com/mozilla/login.webmaker.org https://github.com/mozilla/login.webmaker.org/commit/f21c24d8d3e1dbede0dc43c851495ea839535dcc [bug 882311] Added csrf token to persona routes https://github.com/mozilla/login.webmaker.org/commit/7e01f8cd93cb6d307aa14a6b6b295e5ae0b5d3c0 Merge pull request #104 from ksedge/bug882311 [bug 882311] Added csrf token to persona routes
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Attachment mime type: text/plain → text/x-github-pull-request
You need to log in before you can comment on or make changes to this bug.