replaced logout csrf middlware with flexible csrf

singharaj-usai · Oct 11, 2024 · 5097c65 · 5097c65
1 parent 9c630ed
commit 5097c65
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/functions/api/routes/auth.js b/server/functions/api/routes/auth.js
@@ -372,7 +372,7 @@ router.post("/login", flexibleCsrfProtection, authLimiter, async (req, res) => {
 });
 
 // Logout endpoint
-router.post("/logout", csrfProtection, async (req, res) => {
+router.post("/logout", flexibleCsrfProtection, async (req, res) => {
   if (req.user) {
     await User.findByIdAndUpdate(req.user._id, { isOnline: false });
   }