commit 576db69522b81fd7702c90040e92b24368b1d3a7
author Ed Tanous <ed@tanous.net> Fri May 10 16:37:56 2024 -0700
committer Ed Tanous <ed@tanous.net> Mon May 13 17:51:27 2024 +0000
tree fa136ac1aa9314e5e9d49864986f60fc02f74b9b
parent c71b6c9919fdc147362f155b352b45e2685e8737

Last fix for inversion

CSRF option got inverted.  Fix it.

Tested: Code compiles.

Change-Id: Ibfc56ef2ce8d065aa7dad836e3d4a5edc5632926
Signed-off-by: Ed Tanous <ed@tanous.net>

include/authentication.hpp

diff --git a/include/authentication.hpp b/include/authentication.hpp
index 5f43f0a..0617cf3 100644
--- a/include/authentication.hpp
+++ b/include/authentication.hpp
@@ -153,7 +153,7 @@
         }
         sessionOut->cookieAuth = true;
 
-        if constexpr (BMCWEB_INSECURE_DISABLE_CSRF)
+        if constexpr (!BMCWEB_INSECURE_DISABLE_CSRF)
         {
             // RFC7231 defines methods that need csrf protection
             if (method != boost::beast::http::verb::get)