mirror of
https://github.com/wassname/talk.git
synced 2026-08-08 11:28:12 +08:00
22 lines
860 B
JavaScript
22 lines
860 B
JavaScript
const express = require('express');
|
|
const router = express.Router();
|
|
const csrf = require('csurf');
|
|
|
|
// Setup route middlewares for CSRF protection.
|
|
// Default ignore methods are GET, HEAD, OPTIONS
|
|
const csrfProtection = csrf({});
|
|
|
|
// Get /password-reset expects a signed token (JWT) in the hash.
|
|
// Links to this endpoint are generated by /views/password-reset-email.ejs.
|
|
router.get('/password-reset', csrfProtection, (req, res, next) => {
|
|
// TODO: store the redirect uri in the token or something fancy.
|
|
// admins and regular users should probably be redirected to different places.
|
|
res.render('password-reset', {redirectUri: process.env.TALK_ROOT_URL, csrfToken: req.csrfToken()});
|
|
});
|
|
|
|
router.get('*', csrfProtection, (req, res) => {
|
|
res.render('admin', {basePath: '/client/coral-admin', csrfToken: req.csrfToken()});
|
|
});
|
|
|
|
module.exports = router;
|