Mirrors/wireguard_webadmin
1
0
Fork 0
mirror of https://github.com/eduardogsilva/wireguard_webadmin.git synced 2026-03-17 22:36:17 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

implement CSRF protection by adding token generation, validation, and cookie management in login flows

Browse Source
This commit is contained in:
Eduardo Silva
2026-03-16 20:23:18 -03:00
parent ebbffca21d
commit ca63b87123
8 changed files with 214 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
containers/auth-gateway/auth_gateway/templates/login_password.html
View File

@@ -7,6 +7,7 @@
<div class="alert alert-error">{{ error }}</div>
{% endif %}
<form method="post" action="{{ external_path }}/login/password" class="stack">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<input type="hidden" name="next" value="{{ next }}">
<label class="field">
<span>Username</span>

1
containers/auth-gateway/auth_gateway/templates/login_totp.html
View File

@@ -7,6 +7,7 @@
<div class="alert alert-error">{{ error }}</div>
{% endif %}
<form method="post" action="{{ external_path }}/login/totp" class="stack">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<input type="hidden" name="next" value="{{ next }}">
<label class="field">
<span>Verification code</span>

1
containers/auth-gateway/auth_gateway/templates/session.html
View File

@@ -41,6 +41,7 @@
</table>
<hr>
<form method="post" action="{{ external_path }}/logout">
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
<input type="hidden" name="next" value="/">
<button class="btn btn-danger" type="submit">Sign out</button>
</form>