app,server: Switch /reset/step1 to a POST request

Otherwise, caching can become an issue. Also, it's not an idempotent request.
2024-02-09 00:16:07 +01:00
parent f65a6f524a
commit 5c5b87d5af
2 changed files with 21 additions and 16 deletions
--- a/server/src/infra/auth_service.rs
+++ b/server/src/infra/auth_service.rs
@@ -677,7 +677,7 @@ where
    if enable_password_reset {
        cfg.service(
            web::resource("/reset/step1/{user_id}")
-                .route(web::get().to(get_password_reset_step1_handler::<Backend>)),
+                .route(web::post().to(get_password_reset_step1_handler::<Backend>)),
        )
        .service(
            web::resource("/reset/step2/{token}")