vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add CSRF protection to every API call

Browse source
This commit is contained in:
Joseph Schorr 2013-12-28 14:07:44 -05:00
parent 2e3be90054
commit 21ac1c9210
3 changed files with 28 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
static/js/app.js
View file

@ -724,7 +724,7 @@ quayApp = angular.module('quay', ['ngRoute', 'chieffancypants.loadingBar', 'rest
otherwise({redirectTo: '/'});
}]).
config(function(RestangularProvider) {
RestangularProvider.setBaseUrl('/api/');
RestangularProvider.setBaseUrl('/api/');
});
@ -2204,6 +2204,10 @@ quayApp.directive('ngBlur', function() {
quayApp.run(['$location', '$rootScope', 'Restangular', 'UserService', 'PlanService', '$http', '$timeout',
function($location, $rootScope, Restangular, UserService, PlanService, $http, $timeout) {
// Handle session security.
Restangular.setDefaultRequestParams({'_csrf_token': window.__token || ''});
// Handle session expiration.
Restangular.setErrorInterceptor(function(response) {
if (response.status == 401) {