Koha-community/Koha
15
7
Fork 0
Code Issues Releases Wiki Activity

Bug 38993: Send CSRF token for Vue fetches

Browse source 
We need it for syspref at least.

Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
This commit is contained in:
Jonathan Druart 2025-03-20 16:39:30 +01:00 committed by Katrin Fischer
parent 2fc1b5f825
commit 767b5be945
Signed by: kfischer
GPG key ID: 0EF6E2C03357A834
1 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
koha-tmpl/intranet-tmpl/prog/js/vue/fetch/http-client.js
View file

@ -6,6 +6,7 @@ class HttpClient {
this._headers = options.headers || {
"Content-Type": "application/json;charset=utf-8",
};
this.csrf_token = $('meta[name="csrf-token"]').attr("content");
}
async _fetchJSON(
@ -83,9 +84,11 @@ class HttpClient {
? params.body
: JSON.stringify(params.body)
: undefined;
let csrf_token = { "CSRF-TOKEN": this.csrf_token };
let headers = { ...csrf_token, ...params.headers };
return this._fetchJSON(
params.endpoint,
params.headers,
headers,
{
...params.options,
body,
@ -102,9 +105,11 @@ class HttpClient {
? params.body
: JSON.stringify(params.body)
: undefined;
let csrf_token = { "CSRF-TOKEN": this.csrf_token };
let headers = { ...csrf_token, ...params.headers };
return this._fetchJSON(
params.endpoint,
params.headers,
headers,
{
...params.options,
body,
@ -116,9 +121,11 @@ class HttpClient {
}
delete(params = {}) {
let csrf_token = { "CSRF-TOKEN": this.csrf_token };
let headers = { ...csrf_token, ...params.headers };
return this._fetchJSON(
params.endpoint,
params.headers,
headers,
{
parseResponse: false,
...params.options,