catch typeerror in csrf token and return false

2026-02-18 00:27:41 +01:00 · 2025-11-18 16:56:10 -05:00
parent b082e1582a
commit 4f6442a6ad
1 changed files with 1 additions and 1 deletions
--- a/backend/handler/auth/middleware/csrf_middleware.py
+++ b/backend/handler/auth/middleware/csrf_middleware.py
@@ -160,7 +160,7 @@ class CSRFMiddleware:
                and decoded_doc_cookie["user_id"] == user_id
                and decoded_header_cookie["user_id"] == user_id
            )
-        except BadSignature:
+        except (TypeError, BadSignature):
            return False

    def _get_error_response(self, request: Request) -> Response: