Check CSRF after processing the oauth token.

2014-03-25 15:37:58 -04:00 · 2014-03-25 15:37:58 -04:00 · f39793b3ac
commit f39793b3ac
parent 26a57d0c21
1 changed files with 2 additions and 2 deletions
--- a/endpoints/api/init.py
+++ b/endpoints/api/init.py
@ -25,8 +25,8 @@ logger = logging.getLogger(__name__)
 api_bp = Blueprint('api', __name__)
 api = Api()
 api.init_app(api_bp)
-api.decorators = [process_oauth,
-                  csrf_protect,
+api.decorators = [csrf_protect,
+                  process_oauth,
                  crossdomain(origin='*', headers=['Authorization', 'Content-Type'])]