more

plugins/auth/templates/auth/login.html

@@ -1,7 +1,8 @@
 {% extends 'core_ui/base.html' %}
 {% block content %}
 <h2>Login</h2>
-<form method="POST" action="/login">
+<form method="POST" action="{{ url_for('auth.login') }}">
+  <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
   <div class="mb-3">
     <label for="email" class="form-label">Email</label>
     <input type="email" class="form-control" id="email" name="email" required>

plugins/auth/templates/auth/register.html

@@ -3,6 +3,7 @@
 {% block content %}
 <h2>Register</h2>
 <form method="POST">
+    <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
     <div class="mb-3">
         <label>Email</label>
         <input name="email" class="form-control" type="email" required>