diff options
Diffstat (limited to 'modules/middleware/auth.go')
| -rw-r--r-- | modules/middleware/auth.go | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/modules/middleware/auth.go b/modules/middleware/auth.go index 741337da0b..29a2d68110 100644 --- a/modules/middleware/auth.go +++ b/modules/middleware/auth.go @@ -9,6 +9,7 @@ import ( "strings" "github.com/Unknwon/macaron" + "github.com/macaron-contrib/csrf" "github.com/gogits/gogs/modules/setting" ) @@ -34,9 +35,11 @@ func Toggle(options *ToggleOptions) macaron.Handler { return } - if !options.DisableCsrf && ctx.Req.Method == "POST" && !ctx.CsrfTokenValid() { - ctx.Error(403, "CSRF token does not match") - return + if !options.SignOutRequire && !options.DisableCsrf && ctx.Req.Method == "POST" { + csrf.Validate(ctx.Context, ctx.csrf) + if ctx.Written() { + return + } } if options.SignInRequire { |