This commit is contained in:
ildyria
2022-07-10 18:30:54 +02:00
parent 0b1541096c
commit 916d25e4e0

View File

@@ -72,8 +72,8 @@ class WebAuthn {
let xsrfToken; let xsrfToken;
let csrfToken; let csrfToken;
// If xcsrfToken is not set, we try to fetch it.
if (xcsrfToken === null) { if (xcsrfToken === null) {
// If the developer didn't issue an XSRF token, we will find it ourselves.
xsrfToken = WebAuthn.#XsrfToken; xsrfToken = WebAuthn.#XsrfToken;
csrfToken = WebAuthn.#firstInputWithCsrfToken; csrfToken = WebAuthn.#firstInputWithCsrfToken;
} else{ } else{
@@ -90,7 +90,6 @@ class WebAuthn {
if (xsrfToken !== null) { if (xsrfToken !== null) {
this.#headers["X-XSRF-TOKEN"] ??= xsrfToken; this.#headers["X-XSRF-TOKEN"] ??= xsrfToken;
} else if (csrfToken !== null) { } else if (csrfToken !== null) {
// If the developer didn't issue an XSRF token, we will find it ourselves.
this.#headers["X-CSRF-TOKEN"] ??= csrfToken; this.#headers["X-CSRF-TOKEN"] ??= csrfToken;
} else { } else {
// We didn't find it, and since is required, we will bail out. // We didn't find it, and since is required, we will bail out.