Skip to content

Commit 663725f

Browse files
committed
fix: remove csrf check
Signed-off-by: Vitor Mattos <vitor@php.rio>
1 parent 4a18a34 commit 663725f

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

lib/Controller/AdminGroupController.php

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515
use OCP\AppFramework\Http;
1616
use OCP\AppFramework\Http\Attribute\ApiRoute;
1717
use OCP\AppFramework\Http\Attribute\AuthorizedAdminSetting;
18+
use OCP\AppFramework\Http\Attribute\NoCSRFRequired;
1819
use OCP\AppFramework\Http\DataResponse;
1920
use OCP\AppFramework\OCS\OCSException;
2021
use OCP\BackgroundJob\IJobList;
@@ -66,6 +67,7 @@ public function __construct(
6667
*/
6768
#[ApiRoute(verb: 'POST', url: '/api/{apiVersion}/admin-group', requirements: ['apiVersion' => '(v1)'])]
6869
#[AuthorizedAdminSetting(settings:Users::class)]
70+
#[NoCSRFRequired]
6971
#[RestrictIp]
7072
public function createAdminGroup(
7173
string $groupid,
@@ -98,6 +100,7 @@ public function createAdminGroup(
98100
*/
99101
#[ApiRoute(verb: 'POST', url: '/api/{apiVersion}/users-of-group/set-enabled', requirements: ['apiVersion' => '(v1)'])]
100102
#[AuthorizedAdminSetting(settings:Users::class)]
103+
#[NoCSRFRequired]
101104
#[RestrictIp]
102105
public function setEnabled(
103106
string $groupid,

0 commit comments

Comments
 (0)