From 27fdcc1cac28f9da7001454524b31c45c923793d Mon Sep 17 00:00:00 2001
From: Evert Prants <evert@lunasqu.ee>
Date: Sat, 8 Jun 2024 16:03:49 +0300
Subject: [PATCH] whitelist device auth cors

---
 src/hooks.server.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/hooks.server.ts b/src/hooks.server.ts
index dfb9f05..92e3282 100644
--- a/src/hooks.server.ts
+++ b/src/hooks.server.ts
@@ -19,7 +19,7 @@ if (AUTO_MIGRATE === 'true') {
 await runSeeds();
 
 export const handle = sequence(
-	csrf(['/oauth2/token', '/oauth2/introspect']),
+	csrf(['/oauth2/token', '/oauth2/introspect', '/oauth2/device_authorization']),
 	handleSession({
 		secret: SESSION_SECRET,
 		cookie: {