iv-org
/
invidious
mirror of https://github.com/iv-org/invidious.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add CSRF token for Google accounts

This commit is contained in:
Omar Roth 2018-11-15 20:23:17 -06:00
parent b92542ea35
commit 48526435ad
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/invidious.cr
View File

@ -155,6 +155,10 @@ before_all do |env|
client = make_client(YT_URL) client = make_client(YT_URL)
user = get_user(sid, client, headers, PG_DB, false) user = get_user(sid, client, headers, PG_DB, false)
challenge, token = create_response(user.email, "sign_out", HMAC_KEY, 1.week)
env.set "challenge", challenge
env.set "token", token
env.set "user", user env.set "user", user
env.set "sid", sid env.set "sid", sid
rescue ex rescue ex