amorfo77/sogo
1
0
Fork 0
mirror of https://github.com/inverse-inc/sogo.git synced 2026-04-16 02:38:51 +00:00
Code Issues Projects Releases Wiki Activity

feat(password-recovery): Avoid removing XSRF token cookie on passwordRecoveryCheck request

Browse Source
This commit is contained in:
smizrahi
2022-10-25 14:48:30 +02:00
parent 43b81bf9fd
commit 9b023f43d5
3 changed files with 4 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
UI/WebServerResources/js/Common.js
View File

File diff suppressed because one or more lines are too long

2
UI/WebServerResources/js/Common.js.map
View File

File diff suppressed because one or more lines are too long

12
UI/WebServerResources/js/Common/Authentication.service.js
View File

@@ -187,7 +187,7 @@
// Clean cookies for reauthenticate
$cookies.remove('XSRF-TOKEN', { path: '/SOGo/' });
$cookies.remove('0xHIGHFLYxSOGo', { path: '/SOGo/' });
d.resolve({url: redirectUrl(userName, domain)});
}, function(response) {
var error,
@@ -310,23 +310,15 @@
passwordRecoveryEnabled: function (userName, domain) {
const self = this;
var d = $q.defer(),
xsrfCookie = $cookies.get('XSRF-TOKEN');
$cookies.remove('XSRF-TOKEN', { path: '/SOGo/' });
var d = $q.defer();
$http({
method: 'POST',
url: '/SOGo/so/passwordRecoveryEnabled',
headers: {
'X-XSRF-TOKEN': xsrfCookie
},
data: { userName: userName, domain: domain }
}).then(function (response) {
d.resolve(response.data.domain);
}, function () {
// Restore the cookie
$cookies.put('XSRF-TOKEN', xsrfCookie, { path: '/SOGo/' });
d.reject();
});
return d.promise;