Description
To prevent Cross-Site Request Forgery we need to add a double-submit cookie when sending the POST to launch a new instrument.
Acceptance Criteria
- Validate the double-submit cookie. If the double-submit cookie is invalid, then clear the session cookie and redirect to GET /. Otherwise, continue processing the request.
- File a ticket at SREs' board to request for the new secret we need to sign the CSRF token and the session cookie (T366446: [mpic k8s chart] Add two new secrets for Metrics Platform Instrument Configurator)
- Modify the kubernetes chart to include the new secrets as environment variables
Required
- Unit/Integration tests
- Testing instructions
- Documentation