Require auth on upload-token

This commit is contained in:
richard-dds 2019-08-19 16:28:49 -04:00
parent 7d1dfa1d0e
commit 27e0e16707
3 changed files with 1 additions and 3 deletions

View File

@ -13,7 +13,6 @@ UNPROTECTED_ROUTES = [
"atst.helpdocs",
"static",
"atst.about",
"atst.upload_token",
]

View File

@ -4,7 +4,6 @@ from flask import (
render_template,
request as http_request,
url_for,
current_app,
)
from . import task_orders_bp

View File

@ -104,7 +104,7 @@ export default {
this.sizeError = false
},
getUploader: async function() {
return fetch('/upload-token')
return fetch('/upload-token', { credentials: "include" })
.then(response => response.json())
.then(({ token }) => buildUploader(token))
},