LobotomyLabs/dumpsterChat
2
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 10 Wiki Activity

fix: add Tauri origins to CSRF allowlist

Browse Source
This commit is contained in:
Dustin Newkirk
2026-07-20 11:02:34 -04:00
parent c5be9cea52
commit 062bdfddc5
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/server/main.go
+4 -1
View File
@@ -163,7 +163,10 @@ func main() {
r.Group(func(r chi.Router) { r.Group(func(r chi.Router) {
r.Use(middleware.Session(sessionStore, cfg)) r.Use(middleware.Session(sessionStore, cfg))
r.Use(middleware.RequireAuth) r.Use(middleware.RequireAuth)
r.Use(middleware.CSRFProtect(cfg.Host, cfg.Port, strings.Split(os.Getenv("DUMPSTER_CSRF_ORIGINS"), ","))) r.Use(middleware.CSRFProtect(cfg.Host, cfg.Port, append(
strings.Split(os.Getenv("DUMPSTER_CSRF_ORIGINS"), ","),
"tauri://localhost", "http://tauri.localhost", "https://tauri.localhost",
)))
// Auth (protected: me, update profile) // Auth (protected: me, update profile)
authHandler.RegisterProtectedRoutes(r) authHandler.RegisterProtectedRoutes(r)