Added resend, fixed CSRF

2025-02-21 16:16:24 +01:00
parent dbddf12f25
commit de828d4c13
10 changed files with 86 additions and 76 deletions
--- a/backend/api/users_routes.go
+++ b/backend/api/users_routes.go
@@ -8,7 +8,7 @@ import (
 var UserRoutes = map[string]core.Handler{
 	"/users/login": {
 		Handler:     users.HandleLogin,
-		Middlewares: []core.Middleware{Methods("POST")}},
+		Middlewares: []core.Middleware{Methods("POST"), CSRFMiddleware}},
 	// Could add users:own:get permission there, but don't think it's
 	// necessary
 	"/users/me": {