SS-FCSC/fcsc_ipi_backend
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CSRF token removed only for login api : GWM

Browse Source
This commit is contained in:
Gowtham M 2025-12-18 19:47:40 +05:30
parent 00e5705980
commit ae236502cd
2 changed files with 7 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
app/routes/routes.js
View File

@ -106,7 +106,6 @@ const upload = multer({ dest: UPLOAD_DIR });
* tags: [Admin And Establishments User Auth]
* security:
* - appSignature: []
* - CSRF: []
* requestBody:
* required: true
* content:
@ -146,7 +145,6 @@ router.post("/auth/admin_register",[verifySignature], authController.register);
* tags: [Admin And Establishments User Auth]
* security:
* - appSignature: []
* - CSRF: []
* requestBody:
* required: true
* content:
@ -181,7 +179,6 @@ router.post("/auth/login",[verifySignature], authController.login);
* tags: [Admin And Establishments User Auth]
* security:
* - appSignature: []
* - CSRF: []
*/
router.get("/auth/logout",[verifySignature], authController.logout);
@ -2828,7 +2825,7 @@ router.post("/password-reset-requests", establishmentController.createRequest);
* summary: Request OTP for establishment user pwd reset
* tags: [Establishment Pwd Reset Requests]
* security:
* - CSRF: []
* - appSignature: []
* requestBody:
* required: true
* content:
@ -2854,7 +2851,7 @@ router.post("/password-reset-requests", establishmentController.createRequest);
* 500:
* description: Server error
*/
router.post("/forgot-password/request-otp", establishmentController.forgotPasswordRequestOTP);
router.post("/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
@ -2866,7 +2863,7 @@ router.post("/forgot-password/request-otp", establishmentController.forgotPasswo
* summary: Verify OTP and reset establishment user Pwd
* tags: [Establishment Pwd Reset Requests]
* security:
* - CSRF: []
* - appSignature: []
* requestBody:
* required: true
* content:
@ -2893,7 +2890,7 @@ router.post("/forgot-password/request-otp", establishmentController.forgotPasswo
* 500:
* description: Server error
*/
router.post("/forgot-password/verify-otp", establishmentController.forgotPasswordVerifyOTP);
router.post("/forgot-password/verify-otp",[verifySignature], establishmentController.forgotPasswordVerifyOTP);

6
server.js
View File

@ -156,9 +156,9 @@ app.use(
* AUTH (NO CSRF)
* --------------------
*/
app.post("api/auth/login",[verifySignature], authController.login);
app.post("api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
app.post("api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
app.post("/api/auth/login",[verifySignature], authController.login);
app.post("/api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
app.post("/api/forgot-password/verify-otp",[verifySignature], establishmentController.forgotPasswordVerifyOTP);
/**
* --------------------