From bf4ccb0eabe0f4258bc174a83dfba318d0212af1 Mon Sep 17 00:00:00 2001
From: Daniel Friesel <derf@finalrewind.org>
Date: Fri, 8 Mar 2019 16:54:54 +0100
Subject: Logout: Use a POST form as it's a stateful action

---
 templates/login.html.ep | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'templates')

diff --git a/templates/login.html.ep b/templates/login.html.ep
index f85ba91..23d3259 100644
--- a/templates/login.html.ep
+++ b/templates/login.html.ep
@@ -7,7 +7,13 @@
 					<p>
 						Du bist bereits angemeldet. Falls du mehrere Accounts hast
 						und auf einen anderen wechseln möchtest, musst du dich
-						vorher <a href="/logout">abmelden</a>.
+						vorher
+						%= form_for 'logout' => begin
+							%= csrf_field
+							<button class="btn waves-effect waves-light" type="submit" name="action" value="logout">
+								Abmelden
+							</button>
+						%= end
 					</p>
 				</div>
 			</div>
-- 
cgit v1.2.3