From 36c9b0f79dfc9b03146311e1e34d1df5caa60a2e Mon Sep 17 00:00:00 2001
From: Varun Patil <radialapps@gmail.com>
Date: Fri, 19 Aug 2022 22:16:13 +0000
Subject: [PATCH] Require CSRF token

---
 lib/Controller/ApiController.php | 4 ----
 src/components/Timeline.vue      | 9 +++++----
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/lib/Controller/ApiController.php b/lib/Controller/ApiController.php
index 5388e21d..6964a1cc 100644
--- a/lib/Controller/ApiController.php
+++ b/lib/Controller/ApiController.php
@@ -66,7 +66,6 @@ class ApiController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 *
 	 * @return JSONResponse
 	 */
@@ -82,7 +81,6 @@ class ApiController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 *
 	 * @return JSONResponse
 	 */
@@ -123,7 +121,6 @@ class ApiController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 *
 	 * @return JSONResponse
 	 */
@@ -169,7 +166,6 @@ class ApiController extends Controller {
 
 	/**
 	 * @NoAdminRequired
-	 * @NoCSRFRequired
 	 *
 	 * @return JSONResponse
 	 */
diff --git a/src/components/Timeline.vue b/src/components/Timeline.vue
index d734559f..d11d7aa2 100644
--- a/src/components/Timeline.vue
+++ b/src/components/Timeline.vue
@@ -74,6 +74,7 @@
 <script>
 
 import * as dav from "../services/DavRequests";
+import axios from '@nextcloud/axios'
 
 export default {
     data() {
@@ -322,8 +323,8 @@ export default {
             }
 
             const startState = this.state;
-            const res = await fetch(url);
-            const data = await res.json();
+            const res = await axios.get(url);
+            const data = res.data;
             if (this.state !== startState) return;
 
             this.days = data;
@@ -427,8 +428,8 @@ export default {
             let data = [];
             try {
                 const startState = this.state;
-                const res = await fetch(url);
-                data = await res.json();
+                const res = await axios.get(url);
+                const data = res.data;
                 if (this.state !== startState) return;
 
                 this.days.find(d => d.day_id === dayId).detail = data;