only set xsrf if auth is enabled

jupyterhub · May 6, 2024 · 9165f4a · 9165f4a
1 parent 6fa1f1b
commit 9165f4a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/binderhub/base.py b/binderhub/base.py
@@ -142,9 +142,9 @@ def template_namespace(self):
             static_url=self.static_url,
             banner=self.settings["banner_message"],
             auth_enabled=self.settings["auth_enabled"],
-            xsrf=self.xsrf_token.decode("ascii"),
         )
         if self.settings["auth_enabled"]:
+            ns["xsrf"] = self.xsrf_token.decode("ascii")
             ns["api_token"] = self.hub_auth.get_token(self) or ""
 
         ns.update(