Merge pull request #1378 from sharelatex/ew-post-logout

POST logout instead of GET

GitOrigin-RevId: b502a6ed945acd336d1a921e5c4c5433d8b7c7b7
This commit is contained in:
Ersun Warncke
2019-01-15 16:48:00 +00:00
committed by sharelatex
parent 0879226f74
commit 330f878085
10 changed files with 55 additions and 5 deletions
@@ -115,7 +115,7 @@ describe "CSRF protection", ->
@user.request.get '/login', (err, res, body) =>
@user.getCsrfToken (error) =>
oldCsrfToken = @user.csrfToken
@user.request.get '/logout', (err, res, body) =>
@user.logout (err) =>
@user.request.post {
url: "/register"
json:
@@ -89,7 +89,7 @@ class User
logout: (callback = (error) ->) ->
@getCsrfToken (error) =>
return callback(error) if error?
@request.get {
@request.post {
url: "/logout"
json:
email: @email