3 Commits

Include renames

Author	SHA1	Message	Date
5 people	8019c414e1	chore: CSRF protect forgot-password functionality (#22361) ... * chore: CSRF protect forgot-password functionality * feat: implement conditional sameSite cookie setting for CSRF tokens - Use WEBAPP_URL to determine secure cookie settings - Set sameSite to 'none' for HTTPS environments to support cross-origin scenarios - Fall back to 'lax' for HTTP development environments - Follows patterns from PRs #23439 and #23556 Co-Authored-By: alex@cal.com <me@alexvanandel.com> * update * change * NIT * minor --------- Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: unknown <adhabal2002@gmail.com> Co-authored-by: Anik Dhabal Babu <81948346+anikdhabal@users.noreply.github.com>	2025-10-01 13:38:29 +00:00
3 people	ada8ffd3b9	fix: make CSRF cookies accessible in embedded iframe contexts (#23556) ... - Use SameSite=None for HTTPS and SameSite=Lax for development - Follows same pattern as reserveSlot handler for embed compatibility - Fixes 403 errors when cancelling bookings in embedded forms Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2025-09-03 17:57:00 +00:00
Anik Dhabal BabuandGitHub	f6f36750ec	chore: CSRF protect cancel functionality (#23439) ... * add csrf endpoint * Update booking-pages.e2e.ts * Update zod-utils.ts * fix type error	2025-09-01 23:18:50 +00:00