Migliora sessioni admin e rende robusto il logout web.

Aggiunge filtri/colonne (società, orari) e dettaglio leggibile; evita 422 CSRF su logout e non cancella le cover slate custom in sync prod. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-20 20:41:12 +02:00
parent 79c48b226e
commit cc96c0396a
20 changed files with 1127 additions and 91 deletions
@@ -1,5 +1,9 @@
 module Public
  class SessionsController < WebBaseController
+    # Logout must succeed even with a stale CSRF token (old tab after deploy /
+    # session rotate). SameSite=Lax already blocks cross-site cookie POSTs.
+    skip_before_action :verify_authenticity_token, only: :destroy
+
    def new
      if logged_in? && current_user.primary_club
        redirect_to public_club_path(current_user.primary_club)