Merge pull request #14 from LibreSign/fix/remove-csrf-check

fix: remove csrf check
LibreSign · Dec 4, 2024 · 3706153 · 3706153
2 parents 4a18a34 + 663725f
commit 3706153
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/Controller/AdminGroupController.php b/lib/Controller/AdminGroupController.php
@@ -15,6 +15,7 @@
 use OCP\AppFramework\Http;
 use OCP\AppFramework\Http\Attribute\ApiRoute;
 use OCP\AppFramework\Http\Attribute\AuthorizedAdminSetting;
+use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\AppFramework\OCS\OCSException;
 use OCP\BackgroundJob\IJobList;
@@ -66,6 +67,7 @@ public function __construct(
 	 */
 	#[ApiRoute(verb: 'POST', url: '/api/{apiVersion}/admin-group', requirements: ['apiVersion' => '(v1)'])]
 	#[AuthorizedAdminSetting(settings:Users::class)]
+	#[NoCSRFRequired]
 	#[RestrictIp]
 	public function createAdminGroup(
 		string $groupid,
@@ -98,6 +100,7 @@ public function createAdminGroup(
 	 */
 	#[ApiRoute(verb: 'POST', url: '/api/{apiVersion}/users-of-group/set-enabled', requirements: ['apiVersion' => '(v1)'])]
 	#[AuthorizedAdminSetting(settings:Users::class)]
+	#[NoCSRFRequired]
 	#[RestrictIp]
 	public function setEnabled(
 		string $groupid,