Fix CSRF error on register endpoint

curveball · Aug 25, 2024 · 20aaa09 · 20aaa09
1 parent 58d90ca
commit 20aaa09
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/middleware/csrf.ts b/src/middleware/csrf.ts
@@ -1,7 +1,12 @@
 import { Middleware } from '@curveball/kernel';
 
 const safeMethods = ['GET', 'OPTIONS', 'REPORT', 'HEAD', 'SEARCH', 'QUERY'];
-const safePaths = ['/login', '/logout', '/authorize'];
+const safePaths = [
+  '/authorize',
+  '/login',
+  '/logout',
+  '/register',
+];
 
 export default function(): Middleware {