fix!: removed deprecated api method

[raven-wing]

Summary by CodeRabbit

• Bug Fixes

  • Improved CSRF protection by requiring a valid token in the page metadata.
  • Applications now fail immediately when the CSRF token is missing or empty.

• Refactor

  • Removed the deprecated CSRF token API endpoint and related legacy handling.
  • Existing CSRF protection remains enabled without changing other API routes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 4cb802c9-b5b4-46f7-a114-8d79148d3a19

📥 Commits

Reviewing files that changed from the base of the PR and between 326005c and 1bba296.

📒 Files selected for processing (5)

• frontend/src/utils/csrf.js
• goodmap/api_models.py
• goodmap/core_api.py
• goodmap/goodmap.py
• tests/unit_tests/test_core_api.py

💤 Files with no reviewable changes (3)

• goodmap/api_models.py
• goodmap/core_api.py
• tests/unit_tests/test_core_api.py

Included review availability: Your plan includes up to 1 review per rolling hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The frontend now retrieves CSRF tokens synchronously from a page meta tag. The backend removes the deprecated CSRF token endpoint, response model, factory parameter, application wiring, and endpoint test.

Changes

CSRF token flow

Layer / File(s)	Summary
Synchronous meta-tag token retrieval frontend/src/utils/csrf.js	getCsrfToken now returns the meta-tag token synchronously and throws when the token is missing or empty.
Deprecated endpoint and integration removal goodmap/api_models.py, goodmap/core_api.py, goodmap/goodmap.py, tests/unit_tests/test_core_api.py	The deprecated response model and /generate-csrf-token route were removed. Application wiring and endpoint test coverage were updated accordingly.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 1bba2

The deprecated API method removal presents no actionable merge-blocking risk in the supplied evidence, so the PR is merge-ready after normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and concisely describes the removal of the deprecated CSRF API method.
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[raven-wing]

moved to https://github.com/Problematy/goodmap/pull/396/changes