tbs

handler/middleware/cross_site_request_forgery.go

@@ -11,12 +11,17 @@ func CrossSiteRequestForgery(auth *service.Auth) func(http.Handler) http.Handler
 
 			// session := r.Context().Value(SessionKey)
 
-			if r.Method == "POST" {
+			if r.Method == http.MethodPost ||
+				r.Method == http.MethodPut ||
+				r.Method == http.MethodDelete ||
+				r.Method == http.MethodPatch {
+
 				csrfToken := r.FormValue("csrf-token")
 				if csrfToken == "" {
 					http.Error(w, "", http.StatusForbidden)
 					return
 				}
+
 			}
 
 			next.ServeHTTP(w, r)