binarybeach/bb-plane-fork
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[WEB - 1387]dev: custom csrf failure view (#4531)

Browse source 
* dev: custom csrf view

* dev: update template to use only css for styling
This commit is contained in:
Nikhil 2024-05-21 15:04:10 +05:30 • committed by GitHub
parent 410f04c327
commit 0f5294c5e2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 76 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apiserver/plane/authentication/views/common.py
View file

@ -1,3 +1,6 @@
# Django imports
from django.shortcuts import render
# Third party imports
from rest_framework import status
from rest_framework.permissions import AllowAny
@ -17,7 +20,7 @@ from plane.authentication.adapter.error import (
)
from django.middleware.csrf import get_token
from plane.utils.cache import invalidate_cache
from plane.authentication.utils.host import base_host
class CSRFTokenEndpoint(APIView):
@ -34,6 +37,11 @@ class CSRFTokenEndpoint(APIView):
)
def csrf_failure(request, reason=""):
"""Custom CSRF failure view"""
return render(request, "csrf_failure.html", {"reason": reason, "root_url": base_host(request=request)})
class ChangePasswordEndpoint(APIView):
def post(self, request):
user = User.objects.get(pk=request.user.id)

1
apiserver/plane/settings/common.py
View file

@ -345,6 +345,7 @@ CSRF_COOKIE_SECURE = secure_origins
CSRF_COOKIE_HTTPONLY = True
CSRF_TRUSTED_ORIGINS = cors_allowed_origins
CSRF_COOKIE_DOMAIN = os.environ.get("COOKIE_DOMAIN", None)
CSRF_FAILURE_VIEW = "plane.authentication.views.common.csrf_failure"
# Base URLs
ADMIN_BASE_URL = os.environ.get("ADMIN_BASE_URL", None)