Improve invalid CSRF token logging + add explicit dependency (#1130)

MbinOrg · Sep 16, 2024 · 5aec5d8 · 5aec5d8
1 parent 89c1334
commit 5aec5d8
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/composer.json b/composer.json
@@ -89,11 +89,12 @@
         "symfony/runtime": "7.1.*",
         "symfony/scheduler": "7.1.*",
         "symfony/security-bundle": "7.1.*",
+        "symfony/security-csrf": "7.1.*",
         "symfony/serializer": "7.1.*",
         "symfony/string": "7.1.*",
         "symfony/translation": "7.1.*",
-        "symfony/type-info": "7.1.*",
         "symfony/twig-bundle": "7.1.*",
+        "symfony/type-info": "7.1.*",
         "symfony/uid": "7.1.*",
         "symfony/ux-autocomplete": "^2.18.0",
         "symfony/ux-chartjs": "^2.18.0",

diff --git a/composer.lock b/composer.lock
diff --git a/src/Controller/AbstractController.php b/src/Controller/AbstractController.php
@@ -36,7 +36,7 @@ protected function getUserOrThrow(): User
     protected function validateCsrf(string $id, $token): void
     {
         if (!\is_string($token) || !$this->isCsrfTokenValid($id, $token)) {
-            throw new BadRequestHttpException('Invalid CSRF token');
+            throw new BadRequestHttpException("Invalid CSRF token, with ID: $id.");
         }
     }