fic/server
Archived
1
0
Fork 0
Code Issues Pull requests 10 Releases Wiki Activity

admin: avoid CSRF: use POST instead of GET, mainly for synchronisation methods

Browse source
This commit is contained in:
nemunaire 2018-01-06 15:08:05 +01:00
commit 87428909b2
4 changed files with 18 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

2
admin/api/certificate.go
View file

@ -23,7 +23,7 @@ func init() {
router.GET("/api/teams/:tid/certificate.p12", apiHandler(teamHandler(GetTeamCertificate)))
router.DELETE("/api/teams/:tid/certificate.p12", apiHandler(teamHandler(
func(team fic.Team, _ []byte) (interface{}, error) { return team.RevokeCert() })))
router.GET("/api/teams/:tid/certificate/generate", apiHandler(teamHandler(
router.POST("/api/teams/:tid/certificate/generate", apiHandler(teamHandler(
func(team fic.Team, _ []byte) (interface{}, error) { return team.GenerateCert() })))
}