corubba 3e462dab17 Fix csrf configuration ... CSRF has been initialized *before* the app config was fully read. That made it impossible to configure CSRF properly. Moved the CSRF init into the routes module, and switched from programmatic to decorated exemptions. GET routes don't need to be exempted because they are by default.		2022-06-18 18:51:40 +02:00
..
lib	feat: Move the account parse calls to a method	2022-06-18 14:30:56 +02:00
models	feat: Move the account parse calls to a method	2022-06-18 14:30:56 +02:00
routes	Fix csrf configuration	2022-06-18 18:51:40 +02:00
services	Use HTTP_X_FORWARDED_PROTO header from reverse proxy to rewrite https:// for SAML request URLs	2022-05-19 19:00:38 -07:00
static	Add general modal functions	2022-05-19 00:53:20 +02:00
templates	feat: Add the extra chars as an option	2022-06-18 14:30:56 +02:00
__init__.py	Fix csrf configuration	2022-06-18 18:51:40 +02:00
assets.py	Add 'otp_force' basic setting (#1051)	2021-12-17 11:41:51 +01:00
decorators.py	enh: Enforce Record Restrictions in API (#1089)	2022-06-18 14:20:49 +02:00
default_config.py	default config: add exemplary URL encoding step for SQLA DB URL params	2021-11-30 22:29:00 +01:00
swagger-spec.yaml	Updated the unknown state	2022-05-23 16:46:11 +00:00