fix: disable csrf on setup route

SPLRGE · Aug 21, 2024 · a5da91b · a5da91b
1 parent 1911fae
commit a5da91b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/shield.ts b/config/shield.ts
@@ -17,7 +17,7 @@ const shieldConfig = defineConfig({
    */
   csrf: {
     enabled: true,
-    exceptRoutes: [],
+    exceptRoutes: ['auth.setup'],
     enableXsrfCookie: false,
     methods: ['POST', 'PUT', 'PATCH', 'DELETE'],
   },