Code

Refresh CSRF tokens#5177

Code

Merged

rauchy merged 6 commits intomastergetredash/redash:masterfrom refresh-csrf-tokensgetredash/redash:refresh-csrf-tokensCopy head branch name to clipboardSep 21, 2020

+39-26

Commits

Commits on Sep 21, 2020

• expire CSRF tokens after 6 hours

  

  Omer Lachish

  committed
  fd02696

• use axios' built-in cookie to header copy mechanism

  

  Omer Lachish

  committed
  d4ef21e

• add axios-auth-refresh

  

  Omer Lachish

  committed
  78ea9e3

• retry CSRF-related 400 errors by refreshing the cookie

  

  Omer Lachish

  committed
  413c27c

• export the auth refresh interceptor to support ejecting it if neccessary

  

  Omer Lachish

  committed
  dde2685

• reject the original request if it's unrelated to CSRF

  

  Omer Lachish

  committed
  9c4a00c