This commit is contained in:
patrick brisbin 2021-02-26 14:47:38 -05:00
parent 80552b399c
commit 9dafb18923

View File

@ -140,12 +140,9 @@ verifySessionCSRF sessionKey = do
token <- requireGetParam "state"
sessionToken <- lookupSession sessionKey
deleteSession sessionKey
unless (sessionToken == Just token) $ throwError $ InvalidStateToken
sessionToken
token
pure token
token <$ unless
(sessionToken == Just token)
(throwError $ InvalidStateToken sessionToken token)
requireGetParam
:: (MonadError DispatchError m, MonadHandler m) => Text -> m Text