refactor(actions): centralize POST/CSRF guard flow

2026-04-24 17:59:57 +02:00
parent 87652e55da
commit cfd867bcd7
16 changed files with 175 additions and 75 deletions
--- a/pages/admin/settings/run-user-lifecycle().php
+++ b/pages/admin/settings/run-user-lifecycle().php
@@ -18,8 +18,12 @@ if (!$decision->isAllowed()) {
    Guard::deny();
 }

-if (requestInput()->method() !== 'POST') {
-    Router::redirect('admin/settings');
+if (!actionRequirePost('admin/settings')) {
+    return;
+}
+
+if (!actionRequireCsrf('admin/settings', 'admin/settings', 'user_lifecycle_run')) {
+    return;
 }

 $errorBag = formErrors();