delete CSRF token when renewing session

liveshowy · Jul 2, 2024 · 05046f9 · 05046f9
1 parent 6a28d2f
commit 05046f9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/templates/controllers/session.ex b/templates/controllers/session.ex
@@ -65,6 +65,8 @@ defmodule <%= inspect @web_pascal_case %>.Session do
   #     end
   #
   defp renew_session(conn) do
+    delete_csrf_token()
+
     conn
     |> configure_session(renew: true)
     |> clear_session()