Skip to content

Commit 4fa0e82

Browse files
committed
Add Miisng csrf during registration
1 parent 334d8e5 commit 4fa0e82

2 files changed

Lines changed: 2 additions & 1 deletion

File tree

example/test_app/templates/rest/login.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
data: {"csrfmiddlewaretoken": "{{ csrf_token }}"},
2323
success: async function (data) {
2424
window.state_token = data.state_token
25-
user_data = await get_credential(data.options, true)
25+
user_data = await get_credential(data.options, false, true)
2626
if (user_data.type == "password") {
2727
console.log(user_data)
2828
alert("user is logging in with password, not passkey, forward to the ");

passkeys/templates/passkeys/manage.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,7 @@
3333
}).then(function(attestation) {
3434
attestation["key_name"] = $("#key_name").val();
3535
return fetch('{% url 'passkeys:reg_complete' %}', {
36+
headers:{'X-CSRFToken': "{{csrf_token}}"},
3637
method: 'POST',
3738
body: JSON.stringify(publicKeyCredentialToJSON(attestation))
3839
});

0 commit comments

Comments
 (0)