mediocregopher/mediocre-blog
1
0
Fork 0
Code Pull Requests Releases Activity

Get rid of CSRF code in api.js

Browse Source
This commit is contained in:
Brian Picciano 2022-06-03 13:42:59 -06:00
parent 08811a6da7
commit fa47baffb6
1 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
srv/src/http/static/api.js
View File

@ -1,7 +1,5 @@
import * as utils from "/static/utils.js";
const csrfTokenCookie = "csrf_token";
const doFetch = async (req) => {
let res, jsonRes;
try {
@ -55,14 +53,8 @@ const call = async (route, opts = {}) => {
requiresPow = false,
} = opts;
if (!utils.cookies[csrfTokenCookie])
throw `${csrfTokenCookie} cookie not set, can't make api call`;
const reqOpts = {
method,
headers: {
"X-CSRF-Token": utils.cookies[csrfTokenCookie],
},
};
if (requiresPow) {
@ -92,12 +84,6 @@ const ws = async (route, opts = {}) => {
const protocol = docURL.protocol == "http:" ? "ws:" : "wss:";
const fullParams = new URLSearchParams(params);
const csrfToken = utils.cookies[csrfTokenCookie];
if (!csrfToken)
throw `${csrfTokenCookie} cookie not set, can't make api call`;
fullParams.set("csrfToken", csrfToken);
if (requiresPow) {
const {seed, solution} = await solvePow();