Added CSRF tokens to non-partial templates.

This commit is contained in:
rainbow napkin 2024-12-29 15:02:37 -05:00
parent 2ea3c72a61
commit 83f76af6e8
24 changed files with 94 additions and 22 deletions

View file

@ -16,6 +16,7 @@ along with this program. If not, see <https://www.gnu.org/licenses/>.*/
//Local Imports
const {userModel} = require('../schemas/user/userSchema');
const csrfUtils = require('../utils/csrfUtils');
const {exceptionHandler, errorHandler} = require('../utils/loggerUtils');
//Config
@ -27,18 +28,21 @@ module.exports.get = async function(req, res){
try{
var profileName = req.url.slice(1) == '' ? (req.session.user ? req.session.user.user : null) : req.url.slice(1);
const profile = await userModel.findProfile({user: profileName})
const profile = await userModel.findProfile({user: profileName});
if(profile){
res.render('profile', {
instance: config.instanceName,
user: req.session.user,
profile
profile,
csrfToken: csrfUtils.generateToken(req)
});
}else{
res.render('profile', {instance: config.instanceName,
res.render('profile', {
instance: config.instanceName,
user: req.session.user,
profile: null
profile: null,
csrfToken: csrfUtils.generateToken(req)
});
}
}catch(err){