QT/InvoiceShelf
1
0
Fork 0
mirror of https://github.com/InvoiceShelf/InvoiceShelf.git synced 2026-04-07 13:41:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(csrf-token): add leading dot to session domain cookie. (#224)

Browse Source 
* fix(csrf-token): add leading dot to session domain cookie.

* refactor: remove generate key, upgrade axios and keep session domain in null.

* refactor: fix PSR-12 code styles for PHP 8.2 compatibility.

---------

Co-authored-by: Darko Gjorgjijoski <5760249+gdarko@users.noreply.github.com>
This commit is contained in:
Loduis Madariaga Barrios
2025-08-28 02:44:34 -05:00
committed by GitHub
parent bf0d98c69c
commit 8e96d3e972
13 changed files with 59 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/Http/Controllers/V1/Installation/DatabaseConfigurationController.php
View File

@@ -29,7 +29,10 @@ class DatabaseConfigurationController extends Controller
$results = $this->environmentManager->saveDatabaseVariables($request);
if (array_key_exists('success', $results)) {
Artisan::call('key:generate --force');
// Automatically regenerating the key is disabled to prevent complications in the wizard process.
// This can cause issues with the CSRF token, resulting in "Token Mismatch" or "Invalid CSRF Token" errors.
// It is recommended that the user manually generates the key before running the wizard to ensure application security and stability.
// Artisan::call('key:generate --force');
Artisan::call('optimize:clear');
Artisan::call('config:clear');
Artisan::call('cache:clear');