feat: enable CSRF again

eiladin · Sep 7, 2021 · a7631ba · a7631ba
1 parent fa412ae
commit a7631ba
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 6 deletions.
diff --git a/Makefile b/Makefile
@@ -13,4 +13,10 @@ classicBuild: ## Build docker eiladin/go-simple-startpage:$(tag)
 	docker build -f Dockerfile  --build-arg version=$(tag) . -t eiladin/go-simple-startpage:$(tag)
 
 classicPublish: classicBuild ## Push docker eiladin/go-simple-startpage:$(tag) to docker hub with a classic docker build
-	docker push eiladin/go-simple-startpage:$(tag)
+	docker push eiladin/go-simple-startpage:$(tag)
+
+test: ## Run unit tests
+	go test ./... -version
+
+test-coverage: ## Gather code coverage
+	go test ./... -coverprofile=coverage.out -covermode=atomic
diff --git a/internal/server/middleware.go b/internal/server/middleware.go
@@ -39,10 +39,10 @@ func getMiddleware(c *config.Config) []echo.MiddlewareFunc {
 		middleware.CORS(),
 		middleware.RequestID(),
 		middleware.Secure(),
-		// middleware.CSRFWithConfig(middleware.CSRFConfig{
-		// 	Skipper:      csrfSkipper,
-		// 	CookieSecure: true,
-		// }),
+		middleware.CSRFWithConfig(middleware.CSRFConfig{
+			Skipper:      csrfSkipper,
+			CookieSecure: true,
+		}),
 		middleware.Recover(),
 		middleware.GzipWithConfig(middleware.GzipConfig{
 			Skipper: gzipSkipper,

diff --git a/ui/angular.json b/ui/angular.json
@@ -72,7 +72,8 @@
         "serve": {
           "builder": "@angular-devkit/build-angular:dev-server",
           "options": {
-            "browserTarget": "ui:build"
+            "browserTarget": "ui:build",
+            "disableHostCheck": true
           },
           "configurations": {
             "production": {