mirror of
https://github.com/getnamingo/registry.git
synced 2025-08-12 12:29:20 +02:00
Further WebAuthn fixes
This commit is contained in:
parent
5dedac6c57
commit
3684970ff9
1 changed files with 18 additions and 2 deletions
|
@ -183,14 +183,30 @@ $container->set('validator', function ($container) {
|
||||||
});
|
});
|
||||||
|
|
||||||
$container->set('csrf', function($container) use ($responseFactory) {
|
$container->set('csrf', function($container) use ($responseFactory) {
|
||||||
return new Guard($responseFactory);
|
return new Slim\Csrf\Guard($responseFactory);
|
||||||
});
|
});
|
||||||
|
|
||||||
$app->add(new \App\Middleware\ValidationErrorsMiddleware($container));
|
$app->add(new \App\Middleware\ValidationErrorsMiddleware($container));
|
||||||
$app->add(new \App\Middleware\OldInputMiddleware($container));
|
$app->add(new \App\Middleware\OldInputMiddleware($container));
|
||||||
$app->add(new \App\Middleware\CsrfViewMiddleware($container));
|
$app->add(new \App\Middleware\CsrfViewMiddleware($container));
|
||||||
|
|
||||||
$app->add('csrf');
|
$csrfMiddleware = function ($request, $handler) use ($container) {
|
||||||
|
$uri = $request->getUri();
|
||||||
|
$path = $uri->getPath();
|
||||||
|
|
||||||
|
// Get the CSRF Guard instance from the container
|
||||||
|
$csrf = $container->get('csrf');
|
||||||
|
|
||||||
|
// Skip CSRF for the specific path
|
||||||
|
if ($path && $path === '/webauthn/register/verify') {
|
||||||
|
return $handler->handle($request);
|
||||||
|
}
|
||||||
|
|
||||||
|
// If not skipped, apply the CSRF Guard
|
||||||
|
return $csrf->process($request, $handler);
|
||||||
|
};
|
||||||
|
|
||||||
|
$app->add($csrfMiddleware);
|
||||||
$app->setBasePath(routePath());
|
$app->setBasePath(routePath());
|
||||||
|
|
||||||
require __DIR__ . '/../routes/web.php';
|
require __DIR__ . '/../routes/web.php';
|
Loading…
Add table
Add a link
Reference in a new issue