From 78e8f597ff28f1b8406f5cfbf934adc22abdf85b Mon Sep 17 00:00:00 2001
From: Peter Stone <thepeterstone@gmail.com>
Date: Tue, 20 Jan 2026 15:18:57 -1000
Subject: Add CSRF protection and auth unit tests

Add CSRF token middleware for state-changing request protection,
integrate tokens into templates and HTMX headers, and add unit
tests for authentication service and handlers.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 web/templates/login.html | 1 +
 1 file changed, 1 insertion(+)

(limited to 'web/templates/login.html')

diff --git a/web/templates/login.html b/web/templates/login.html
index e5ce9e4..c865ce5 100644
--- a/web/templates/login.html
+++ b/web/templates/login.html
@@ -18,6 +18,7 @@
             {{end}}
 
             <form method="POST" action="/login" class="space-y-6">
+                <input type="hidden" name="csrf_token" value="{{.CSRFToken}}">
                 <div>
                     <label for="username" class="block text-sm font-medium text-gray-700 mb-2">
                         Username
-- 
cgit v1.2.3