From acba478f750db112316dccfa987e2db85e8056ac Mon Sep 17 00:00:00 2001
From: Umputun <umputun@gmail.com>
Date: Sun, 13 May 2018 12:56:14 -0500
Subject: [PATCH] dbl token leftovers

---
 app/rest/auth/provider.go | 13 -------------
 1 file changed, 13 deletions(-)

diff --git a/app/rest/auth/provider.go b/app/rest/auth/provider.go
index cbf2b31d..d15477bd 100644
--- a/app/rest/auth/provider.go
+++ b/app/rest/auth/provider.go
@@ -186,7 +186,6 @@ func (p Provider) authHandler(w http.ResponseWriter, r *http.Request) {
 		rest.SendErrorJSON(w, r, http.StatusInternalServerError, err, "failed to save user info")
 		return
 	}
-	p.sendXSRFCookie(w)
 
 	log.Printf("[DEBUG] user info %+v", session.Values["uinfo"])
 
@@ -222,18 +221,6 @@ func (p Provider) LogoutHandler(w http.ResponseWriter, r *http.Request) {
 	log.Printf("[DEBUG] logout, %+v", session.Values)
 }
 
-func (p Provider) sendXSRFCookie(w http.ResponseWriter) {
-	xsrfCookie := http.Cookie{
-		Name:     "XSRF-TOKEN",
-		Value:    p.randToken(),
-		HttpOnly: false,
-		Path:     "/",
-		MaxAge:   3600 * 24 * 365,
-		Secure:   true,
-	}
-	http.SetCookie(w, &xsrfCookie)
-}
-
 func (p Provider) randToken() string {
 	b := make([]byte, 32)
 	if _, err := rand.Read(b); err != nil {