From f2136d0cc28db70fafb311501f6553d9c783051b Mon Sep 17 00:00:00 2001
From: giles <giles.bradshaw@sigyl.com>
Date: Sat, 21 Feb 2026 15:46:54 +0000
Subject: [PATCH] Add CSRF token to logout form in base template

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 templates/federation/base.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/templates/federation/base.html b/templates/federation/base.html
index 6eca233..06a0c52 100644
--- a/templates/federation/base.html
+++ b/templates/federation/base.html
@@ -20,6 +20,7 @@
             <a href="{{ url_for('identity.choose_username_form') }}" class="hover:underline">Choose username</a>
           {% endif %}
           <form method="post" action="{{ url_for('auth.logout') }}" class="inline">
+            <input type="hidden" name="csrf_token" value="{{ csrf_token() }}">
             <button type="submit" class="hover:underline">Logout</button>
           </form>
         {% else %}