PowerOn/gateway
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: stripe callback csrf rausgenommen

Browse source
This commit is contained in:
Ida Dittrich 2026-02-25 09:00:12 +01:00
parent 7578d8bf3e
commit 258594f310
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
modules/auth/csrf.py
View file

@ -28,6 +28,7 @@ class CSRFMiddleware(BaseHTTPMiddleware):
"/api/google/login", "/api/google/login",
"/api/msft/callback", "/api/msft/callback",
"/api/google/callback", "/api/google/callback",
"/api/billing/webhook/stripe", # Stripe webhook (auth via Stripe-Signature)
} }
# Path prefixes exempt from CSRF (for service-to-service callbacks) # Path prefixes exempt from CSRF (for service-to-service callbacks)