fix: CSRF token is required when using the Revoke Session API endpoint (

#839) Closes #838
ory · Nov 23, 2020 · d3218a0 · d3218a0
1 parent 09c12a2
commit d3218a0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/session/handler.go b/session/handler.go
@@ -50,6 +50,7 @@ const (
 
 func (h *Handler) RegisterPublicRoutes(public *x.RouterPublic) {
  h.r.CSRFHandler().ExemptPath(RouteWhoami)
+ h.r.CSRFHandler().ExemptPath(RouteRevoke)
 
  for _, m := range []string{http.MethodGet, http.MethodHead, http.MethodPost, http.MethodPut, http.MethodPatch,
  http.MethodDelete, http.MethodConnect, http.MethodOptions, http.MethodTrace} {