glenux-contrib/metamaps--metamaps
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix csrf auth token

Browse source
This commit is contained in:
Connor Turland 2017-03-16 00:17:30 -04:00
parent 20c9f989e1
commit 6fdd6acc11
2 changed files with 12 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/application_controller.rb
View file

@ -4,7 +4,7 @@ class ApplicationController < ActionController::Base
include Pundit include Pundit
include PunditExtra include PunditExtra
rescue_from Pundit::NotAuthorizedError, with: :handle_unauthorized rescue_from Pundit::NotAuthorizedError, with: :handle_unauthorized
#protect_from_forgery(with: :exception) protect_from_forgery(with: :exception)
before_action :invite_link before_action :invite_link
before_action :prepare_exception_notifier before_action :prepare_exception_notifier

12
frontend/src/components/App/LoginForm.js
View file

@ -5,10 +5,20 @@ class LoginForm extends Component {
loginFormAuthToken: PropTypes.string loginFormAuthToken: PropTypes.string
} }
constructor(props) {
super(props)
this.state = { token: '' }
}
componentDidMount() {
const token = document.head.getElementsByTagName('meta')['csrf-token'].content
this.setState({token})
}
render () { render () {
return <form className="loginAnywhere" id="new_user" action="/login" acceptCharset="UTF-8" method="post"> return <form className="loginAnywhere" id="new_user" action="/login" acceptCharset="UTF-8" method="post">
<input name="utf8" type="hidden" value="✓" /> <input name="utf8" type="hidden" value="✓" />
<input type="hidden" name="authenticity_token" value="9z5D3vUGKM5ExKJ0CmhweE8qysvUqjFMwgMvbYXIlrnvg9sqJWIWgCt9lq28NZgyCaNudF+w+dRPD1pybeT4mg==" /> <input type="hidden" name="authenticity_token" value={this.state.token} />
<div className="accountImage"></div> <div className="accountImage"></div>
<div className="accountInput accountEmail"> <div className="accountInput accountEmail">
<input placeholder="Email" type="email" name="user[email]" id="user_email" /> <input placeholder="Email" type="email" name="user[email]" id="user_email" />