Ghost/core/server/web/oauth
Thibaut Patel 2bcc934eb4 Disable CSRF on the oauth callback route
no issue

Keeping CSRF enabled there would prevent oauth from working as users are redirected from the provider domain to the /callback route, where they are logged-in
2021-05-18 20:44:21 +02:00
..
app.js Disable CSRF on the oauth callback route 2021-05-18 20:44:21 +02:00
index.js Added oauth login and invitation acceptance 2021-04-21 19:36:27 +02:00