Prevent csrf fixation attack (#5725)

phoenixframework · Mar 10, 2024 · 15e0030 · 15e0030
1 parent 5ccf805
commit 15e0030
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/priv/templates/phx.gen.auth/auth.ex b/priv/templates/phx.gen.auth/auth.ex
@@ -60,6 +60,8 @@ defmodule <%= inspect auth_module %> do
   #     end
   #
   defp renew_session(conn) do
+    delete_csrf_token()
+
     conn
     |> configure_session(renew: true)
     |> clear_session()