Merge pull request #14 from cego/thwo/remove-csrf

thwo/remove-csrf
cego · Jun 7, 2021 · d5e607d · d5e607d
2 parents e2ef07b + 251aa85
commit d5e607d
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 15 deletions.
diff --git a/publishable/routes/web.php b/publishable/routes/web.php
@@ -1,21 +1,25 @@
 <?php
 
 use Illuminate\Support\Facades\Route;
+use App\Http\Middleware\VerifyCsrfToken;
 
-Route::namespace('Cego\RequestLog\Controllers')->prefix('vendor')->group(function () {
-    Route::get('request-logs/toggle', 'RequestLogController@toggle')
-        ->name('request-logs.toggle')
-        ->middleware('web');
+Route::namespace('Cego\RequestLog\Controllers')
+    ->prefix('vendor')
+    ->middleware('web')
+    ->group(function () {
+        Route::get('request-logs/toggle', 'RequestLogController@toggle')
+            ->name('request-logs.toggle')
+            ->withoutMiddleware(VerifyCsrfToken::class);
 
-    Route::delete('request-logs/delete', 'RequestLogController@delete')
-        ->name('request-logs.delete')
-        ->middleware('web');
+        Route::delete('request-logs/delete', 'RequestLogController@delete')
+            ->name('request-logs.delete')
+            ->withoutMiddleware(VerifyCsrfToken::class);
 
-    Route::resource('request-logs/blacklisted-routes', 'BlacklistedRoutesController')
-        ->only(['index', 'create', 'store', 'destroy'])
-        ->middleware('web');
+        Route::resource('request-logs/blacklisted-routes', 'BlacklistedRoutesController')
+            ->only(['index', 'create', 'store', 'destroy'])
+            ->withoutMiddleware(VerifyCsrfToken::class);
 
-    Route::resource('request-logs', 'RequestLogController')
-        ->only(['index', 'show', 'destroy'])
-        ->middleware('web');
-});
+        Route::resource('request-logs', 'RequestLogController')
+            ->only(['index', 'show', 'destroy'])
+            ->withoutMiddleware(VerifyCsrfToken::class);
+    });
diff --git a/publishable/views/blacklisted-routes/create.blade.php b/publishable/views/blacklisted-routes/create.blade.php
@@ -13,7 +13,6 @@
 
                     <div>
                         <form method="post" action="{{ route('blacklisted-routes.store') }}" class="form-inline mb-5">
-                            {{ csrf_field() }}
                             <div class="">
                                 <div class="form-group">
                                     <label class="form-check-label mr-3">