Merge branch 'dev' of github.com:microweber/microweber into dev

microweber · Jun 30, 2022 · c2991b3 · c2991b3
2 parents def0a6d + b985b8e
commit c2991b3
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/src/MicroweberPackages/User/routes/api.php b/src/MicroweberPackages/User/routes/api.php
@@ -99,7 +99,9 @@
     ->group(function () {
 
     Route::post('login', 'UserLoginController@login')->name('login')->middleware(['allowed_ips','throttle:60,1']);
-    Route::any('logout', 'UserLoginController@logout')->name('logout');
+    Route::any('logout', 'UserLoginController@logout')->name('logout')->excludedMiddleware(
+        \MicroweberPackages\App\Http\Middleware\XSS::class
+    );
     Route::post('register', 'UserRegisterController@register')->name('register')->middleware(['allowed_ips']);
 
     Route::post('/forgot-password', 'UserForgotPasswordController@send')
@@ -121,7 +123,14 @@
     ->namespace('\MicroweberPackages\User\Http\Controllers\Api')
     ->group(function () {
 
-        Route::get('/logout', '\MicroweberPackages\User\Http\Controllers\UserLogoutController@index')->name('api.logout');
+        Route::get('/logout', '\MicroweberPackages\User\Http\Controllers\UserLogoutController@index')->name('api.logout')
+            ->middleware([
+                \MicroweberPackages\App\Http\Middleware\VerifyCsrfToken::class,
+                \MicroweberPackages\App\Http\Middleware\SameSiteRefererMiddleware::class
+            ])
+            ->excludedMiddleware(
+           'api'
+        );;
 
         Route::apiResource('user', 'UserApiController');
     });