Merge pull request #493 from finos/fix/remove-lusca-csrf

Remove CSRF due to login breakage
finos · Mar 22, 2024 · c17ca39 · c17ca39
2 parents 1dedd9f + ce09e59
commit c17ca39
Show file tree

Hide file tree

Showing 3 changed files with 0 additions and 23 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -44,7 +44,6 @@
     "jsonschema": "^1.4.1",
     "load-plugin": "^6.0.0",
     "lodash": "^4.17.21",
-    "lusca": "^1.7.0",
     "moment": "^2.29.4",
     "mongodb": "^5.0.0",
     "nodemailer": "^6.6.1",

diff --git a/src/service/index.js b/src/service/index.js
@@ -4,7 +4,6 @@ const http = require('http');
 const cors = require('cors');
 const app = express();
 const rateLimit = require('express-rate-limit');
-const csrf = require('lusca').csrf;
 
 const limiter = rateLimit({
   windowMs: 15 * 60 * 1000, // 15 minutes
@@ -36,7 +35,6 @@ const start = async () => {
       saveUninitialized: false,
     }),
   );
-  app.use(csrf());
   app.use(passport.initialize());
   app.use(passport.session());
   app.use(express.json());