haskell/yesod
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Provide CSRF token in Dummy login form

Browse Source
This commit is contained in:
Christopher League 2016-04-02 23:04:58 -04:00
parent 09087c934e
commit fd870c95f9
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
yesod-auth/Yesod/Auth/Dummy.hs
View File

@ -20,10 +20,13 @@ authDummy =
lift $ setCredsRedirect $ Creds "dummy" ident [] lift $ setCredsRedirect $ Creds "dummy" ident []
dispatch _ _ = notFound dispatch _ _ = notFound
url = PluginR "dummy" [] url = PluginR "dummy" []
login authToMaster = login authToMaster = do
request <- getRequest
toWidget [hamlet| toWidget [hamlet|
$newline never $newline never
<form method="post" action="@{authToMaster url}"> <form method="post" action="@{authToMaster url}">
$maybe t <- reqToken request
<input type=hidden name=#{defaultCsrfParamName} value=#{t}>
Your new identifier is: # Your new identifier is: #
<input type="text" name="ident"> <input type="text" name="ident">
<input type="submit" value="Dummy Login"> <input type="submit" value="Dummy Login">