CsrfToken Constructor mis-using Segment accessor method

[alc]

Like the title says, when the CsrfToken constructor is checking for an existing csrf token value, it's written as if Segment defines a __get method, but Segment has a regular get() method instead.

As a result, every time $session->getCsrfToken() is called, the token fails to find it's previous value from the session, and generates a new one...so no value can ever pass a $token->isValid() check.

[harikt]

Thank you @alc for reporting.

Plese see the patch, which will resolve the issue.

Thanks

[alc]

Thanks guys for the quick fix. I've really enjoyed using the v2 packages so far. Cheers for all your hard work!

[harikt]

You are welcome 👍 and thanks for using aura. Please join google groups if you are not there https://groups.google.com/d/forum/auraphp .

Thank you