From 3b10aceb61efb41fb5d7745a89fff7826fd900bc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Vieilledent?= <lolautruche@gmail.com>
Date: Thu, 25 Jun 2015 16:22:54 +0200
Subject: [PATCH] Fix EZP-24476: Refactor CSRF token generation in Security
 login form

> https://jira.ez.no/browse/EZP-24476

Ref https://github.com/ezsystems/ezpublish-kernel/pull/1318
---
 Resources/views/Security/login.html.twig    | 2 +-
 Resources/views/page_header_links.html.twig | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Resources/views/Security/login.html.twig b/Resources/views/Security/login.html.twig
index dddc7f7..254cb8a 100644
--- a/Resources/views/Security/login.html.twig
+++ b/Resources/views/Security/login.html.twig
@@ -27,7 +27,7 @@
                     </div>
 
                     <div class="buttonblock">
-                        <input type="hidden" name="_csrf_token" value="{{ csrf_token }}" />
+                        <input type="hidden" name="_csrf_token" value="{{ csrf_token("authenticate") }}" />
                         <input class="defaultbutton" type="submit" name="LoginButton" value="{{ "Login"|trans }}" />
                     </div>
 
diff --git a/Resources/views/page_header_links.html.twig b/Resources/views/page_header_links.html.twig
index e220c0d..8fe4aa9 100644
--- a/Resources/views/page_header_links.html.twig
+++ b/Resources/views/page_header_links.html.twig
@@ -34,6 +34,7 @@
                 </div>
             </fieldset>
             <input type="hidden" name="_target_path" value="" />
+            <input type="hidden" name="_csrf_token" value="{{ csrf_token("authenticate") }}" />
         </form>
     </li>
 {% endif %}