anti csrf token generated upon login

2024-01-12 16:58:47 +08:00
parent f1d13a1217
commit 9dcf1429a8
6 changed files with 236 additions and 110 deletions
--- a/Sean/views/otp.ejs
+++ b/Sean/views/otp.ejs
@ -69,6 +69,7 @@
        <label for="otp">OTP:</label>
        <input type="text" id="otp" name="otp" required>
        <br>
+        <input type="hidden" name="csrf_token" value="<%= csrfToken %>">
        <button type="submit">Submit OTP</button>
    </form>
 </body>