iv-org-mirror/invidious
1
0
Fork 0
mirror of https://gitea.invidious.io/iv-org/invidious.git synced 2024-08-15 00:53:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add CSRF token for Google accounts

Browse source
This commit is contained in:
Omar Roth 2018-11-15 20:23:17 -06:00
parent b92542ea35
commit 48526435ad
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/invidious.cr
View file

@ -155,6 +155,10 @@ before_all do |env|
client = make_client(YT_URL)
user = get_user(sid, client, headers, PG_DB, false)
challenge, token = create_response(user.email, "sign_out", HMAC_KEY, 1.week)
env.set "challenge", challenge
env.set "token", token
env.set "user", user
env.set "sid", sid
rescue ex