Skip to content

Commit

Permalink
Reset CSRF token to null when logging out from a server
Browse files Browse the repository at this point in the history
With the current state of the extension, the CRSF token acquired on the first
invocation to authenticate is not cleared on logout and thus is getting reused
by follow-up authentication calls resulting in CSRF errors.
  • Loading branch information
sbesson committed May 15, 2024
1 parent d378e0f commit 6d91d0c
Showing 1 changed file with 1 addition and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -554,6 +554,7 @@ public void logOut() {
timer.cancel();
timer = null;
username.set("");
this.token = null;
} catch (IOException e) {
logger.error("Could not logout.", e.getLocalizedMessage());
}
Expand Down

0 comments on commit 6d91d0c

Please sign in to comment.