Skip to content
This repository was archived by the owner on Sep 17, 2021. It is now read-only.

Fix for #593 by exempting csrf for SSO #709

Merged
scriptsrc merged 1 commit into from
May 11, 2017
Merged

Fix for #593 by exempting csrf for SSO #709

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion security_monkey/sso/views.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,11 +25,13 @@
from .service import fetch_token_header_payload, get_rsa_public_key, setup_user

from security_monkey.datastore import User
from security_monkey import db, rbac
from security_monkey import db, rbac, csrf

from urlparse import urlparse

mod = Blueprint('sso', __name__)
# SSO providers implement their own CSRF protection
csrf.exempt(mod)
api = Api(mod)


Expand Down