lxe/workflow-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix CSRF: use getCSRFToken() in getAuthHeaders() to read from cookie

Browse Source
This commit is contained in:
Kühn
2026-08-25 12:17:08 +02:00
parent b0fcabe4a5
commit dd095d9696
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
frontend/src/utils/api.js
View File

@@ -27,8 +27,9 @@ export function getCSRFToken() {
export function getAuthHeaders(includeContentType = true) { export function getAuthHeaders(includeContentType = true) {
const headers = {}; const headers = {};
if (includeContentType) headers['Content-Type'] = 'application/json'; if (includeContentType) headers['Content-Type'] = 'application/json';
// P4: Attach CSRF token for state-changing requests // P4: Attach CSRF token for state-changing requests (read from cookie if memory is empty)
if (csrfToken) headers['x-csrf-token'] = csrfToken; const token = getCSRFToken();
if (token) headers['x-csrf-token'] = token;
return headers; return headers;
} }