SS-FCSC/fcsc_ipi_backend
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CSRF token removed only for login api : GWM

Browse Source
This commit is contained in:
Gowtham M 2025-12-18 19:47:40 +05:30
parent 00e5705980
commit ae236502cd
2 changed files with 7 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
app/routes/routes.js
View File

@ -106,7 +106,6 @@ const upload = multer({ dest: UPLOAD_DIR });
* tags: [Admin And Establishments User Auth] * tags: [Admin And Establishments User Auth]
* security: * security:
* - appSignature: [] * - appSignature: []
* - CSRF: []
* requestBody: * requestBody:
* required: true * required: true
* content: * content:
@ -146,7 +145,6 @@ router.post("/auth/admin_register",[verifySignature], authController.register);
* tags: [Admin And Establishments User Auth] * tags: [Admin And Establishments User Auth]
* security: * security:
* - appSignature: [] * - appSignature: []
* - CSRF: []
* requestBody: * requestBody:
* required: true * required: true
* content: * content:
@ -181,7 +179,6 @@ router.post("/auth/login",[verifySignature], authController.login);
* tags: [Admin And Establishments User Auth] * tags: [Admin And Establishments User Auth]
* security: * security:
* - appSignature: [] * - appSignature: []
* - CSRF: []
*/ */
router.get("/auth/logout",[verifySignature], authController.logout); router.get("/auth/logout",[verifySignature], authController.logout);
@ -2828,7 +2825,7 @@ router.post("/password-reset-requests", establishmentController.createRequest);
* summary: Request OTP for establishment user pwd reset * summary: Request OTP for establishment user pwd reset
* tags: [Establishment Pwd Reset Requests] * tags: [Establishment Pwd Reset Requests]
* security: * security:
* - CSRF: [] * - appSignature: []
* requestBody: * requestBody:
* required: true * required: true
* content: * content:
@ -2854,7 +2851,7 @@ router.post("/password-reset-requests", establishmentController.createRequest);
* 500: * 500:
* description: Server error * description: Server error
*/ */
router.post("/forgot-password/request-otp", establishmentController.forgotPasswordRequestOTP); router.post("/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
@ -2866,7 +2863,7 @@ router.post("/forgot-password/request-otp", establishmentController.forgotPasswo
* summary: Verify OTP and reset establishment user Pwd * summary: Verify OTP and reset establishment user Pwd
* tags: [Establishment Pwd Reset Requests] * tags: [Establishment Pwd Reset Requests]
* security: * security:
* - CSRF: [] * - appSignature: []
* requestBody: * requestBody:
* required: true * required: true
* content: * content:
@ -2893,7 +2890,7 @@ router.post("/forgot-password/request-otp", establishmentController.forgotPasswo
* 500: * 500:
* description: Server error * description: Server error
*/ */
router.post("/forgot-password/verify-otp", establishmentController.forgotPasswordVerifyOTP); router.post("/forgot-password/verify-otp",[verifySignature], establishmentController.forgotPasswordVerifyOTP);

6
server.js
View File

@ -156,9 +156,9 @@ app.use(
* AUTH (NO CSRF) * AUTH (NO CSRF)
* -------------------- * --------------------
*/ */
app.post("api/auth/login",[verifySignature], authController.login); app.post("/api/auth/login",[verifySignature], authController.login);
app.post("api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP); app.post("/api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP);
app.post("api/forgot-password/request-otp",[verifySignature], establishmentController.forgotPasswordRequestOTP); app.post("/api/forgot-password/verify-otp",[verifySignature], establishmentController.forgotPasswordVerifyOTP);
/** /**
* -------------------- * --------------------