DEV: If only one auth provider is enabled allow GET request

In this case, the auth provider is acting as a SSO provider, and can be trusted to maintain its own CSRF protections.
This commit is contained in:
David Taylor
2019-08-12 11:03:05 +01:00
parent d348368ab6
commit 1a8fee11a0
3 changed files with 16 additions and 4 deletions
-1
View File
@@ -7,4 +7,3 @@ require "middleware/omniauth_bypass_middleware"
Rails.application.config.middleware.use Middleware::OmniauthBypassMiddleware
OmniAuth.config.logger = Rails.logger
OmniAuth.config.allowed_request_methods = [:post]