From 8a936fc2f7194c221ff439be5fa6c89f6b81f197 Mon Sep 17 00:00:00 2001
From: Dave Smith-Hayes <me@davesmithhayes.com>
Date: Tue, 15 Apr 2025 21:30:35 -0400
Subject: [PATCH] Add form key middleware

---
 app/src/Handler/Channel/Page/CreateChannelPage.php | 9 +++++++--
 app/src/Handler/User/Page/LoginUserPage.php        | 6 ++++++
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/app/src/Handler/Channel/Page/CreateChannelPage.php b/app/src/Handler/Channel/Page/CreateChannelPage.php
index 6a086e5..31e2de8 100644
--- a/app/src/Handler/Channel/Page/CreateChannelPage.php
+++ b/app/src/Handler/Channel/Page/CreateChannelPage.php
@@ -2,14 +2,19 @@
 
 namespace Slovocast\Handler\Channel\Page;
 
+use Odan\Session\SessionInterface;
 use Psr\Http\Message\ResponseInterface as Response;
 use Slovocast\Handler\Handler;
 
 class CreateChannelPage extends Handler
 {
+    public function __construct(
+        private SessionInterface $session
+    ) { }
+
     public function handle(): Response
     {
-        // set up the form key
-        return $this->render('channel/create.twig');
+        $formKey = $this->session->get("form_key");
+        return $this->render('channel/create.twig', [ 'form_key' => $formKey ]);
     }
 }
diff --git a/app/src/Handler/User/Page/LoginUserPage.php b/app/src/Handler/User/Page/LoginUserPage.php
index b8fb62e..45949ff 100644
--- a/app/src/Handler/User/Page/LoginUserPage.php
+++ b/app/src/Handler/User/Page/LoginUserPage.php
@@ -2,13 +2,19 @@
 
 namespace Slovocast\Handler\User\Page;
 
+use Odan\Session\SessionInterface;
 use Psr\Http\Message\ResponseInterface as Response;
 use Slovocast\Handler\Handler;
 
 class LoginUserPage extends Handler
 {
+    public function __construct(
+        private SessionInterface $session
+    ) { }
+
     public function handle(): Response
     {
+        $formKey = $this->session->get("form_key");
         return $this->render('user/login.twig');
     }
 }