Skip to content

Commit ca7db9e

Browse files
chore: Add PR's requested changes.
- Add block to UserController@postLogin to avoid concurrency attacks
1 parent 6a12766 commit ca7db9e

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

routes/web.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@
4949
Route::group(array('prefix' => 'verification'), function () {
5050
Route::post('resend', ['middleware' => ['csrf'], 'uses' => 'UserController@resendVerificationEmail']);
5151
});
52-
Route::post('', ['middleware' => 'csrf', 'uses' => 'UserController@postLogin']);
52+
Route::post('', ['middleware' => 'csrf', 'uses' => 'UserController@postLogin'])->block();
5353
Route::get('cancel', "UserController@cancelLogin");
5454
Route::group(array('prefix' => '{provider}'), function () {
5555
Route::get('', 'SocialLoginController@redirect')->name("social_login");

0 commit comments

Comments
 (0)