Provide CSRF token in Dummy login form

2016-04-02 23:04:58 -04:00 · 2016-04-02 23:04:58 -04:00 · fd870c95f9
commit fd870c95f9
parent 09087c934e
1 changed files with 4 additions and 1 deletions
--- a/yesod-auth/Yesod/Auth/Dummy.hs
+++ b/yesod-auth/Yesod/Auth/Dummy.hs
@ -20,10 +20,13 @@ authDummy =
        lift $ setCredsRedirect $ Creds "dummy" ident []
    dispatch _ _ = notFound
    url = PluginR "dummy" []
-    login authToMaster =
+    login authToMaster = do
+        request <- getRequest
        toWidget [hamlet|
 $newline never
 <form method="post" action="@{authToMaster url}">
+    $maybe t <- reqToken request
+        <input type=hidden name=#{defaultCsrfParamName} value=#{t}>
    Your new identifier is: #
    <input type="text" name="ident">
    <input type="submit" value="Dummy Login">