From fd870c95f93884a3552d180910bd5deeee5bfec1 Mon Sep 17 00:00:00 2001
From: Christopher League <league@contrapunctus.net>
Date: Sat, 2 Apr 2016 23:04:58 -0400
Subject: [PATCH] Provide CSRF token in Dummy login form

---
 yesod-auth/Yesod/Auth/Dummy.hs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/yesod-auth/Yesod/Auth/Dummy.hs b/yesod-auth/Yesod/Auth/Dummy.hs
index 91e56601..9e4611d6 100644
--- a/yesod-auth/Yesod/Auth/Dummy.hs
+++ b/yesod-auth/Yesod/Auth/Dummy.hs
@@ -20,10 +20,13 @@ authDummy =
         lift $ setCredsRedirect $ Creds "dummy" ident []
     dispatch _ _ = notFound
     url = PluginR "dummy" []
-    login authToMaster =
+    login authToMaster = do
+        request <- getRequest
         toWidget [hamlet|
 $newline never
 <form method="post" action="@{authToMaster url}">
+    $maybe t <- reqToken request
+        <input type=hidden name=#{defaultCsrfParamName} value=#{t}>
     Your new identifier is: #
     <input type="text" name="ident">
     <input type="submit" value="Dummy Login">