Leahnaya/mastodon
1
0
Fork 0
mirror of https://github.com/mastodon/mastodon.git synced 2026-09-09 04:45:22 -05:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Fix Web Push subscription deletion endpoint incorrectly expecting anti-CSRF tokens (#39918)

Browse Source
This commit is contained in:
Claire
2026-07-22 16:38:49 +02:00
parent 2927749810
commit a8a6bfdf7b
2 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
spec/requests/api/web/push_subscriptions_spec.rb
View File

@@ -6,6 +6,15 @@ RSpec.describe 'API Web Push Subscriptions' do
describe 'DELETE /api/web/push_subscriptions/:id' do
subject { delete api_web_push_subscription_path(token) }
around do |example|
old = ActionController::Base.allow_forgery_protection
ActionController::Base.allow_forgery_protection = true
example.run
ActionController::Base.allow_forgery_protection = old
end
context 'when the subscription exists' do
let!(:web_push_subscription) do
Fabricate(:web_push_subscription)