chore: Ensure multiple version compatibility

Emyrk · Emyrk · commit b18ea2e90e56 · 2022-09-13T12:57:15.000-04:00
diff --git a/coderd/coderd.go b/coderd/coderd.go
@@ -167,7 +167,9 @@ func New(options *Options) *API {
 				next.ServeHTTP(w, r)
 			})
 		},
-		httpmw.CSRF(options.SecureAuthCookie),
+		// Enable CSRF in November 2022 by uncommenting out this line.
+		// This is commented out for backwards compatibility.
+		// httpmw.CSRF(options.SecureAuthCookie),
 	)
 
 	apps := func(r chi.Router) {
diff --git a/codersdk/client.go b/codersdk/client.go
@@ -73,6 +73,14 @@ func (c *Client) Request(ctx context.Context, method, path string, body interfac
 		return nil, xerrors.Errorf("create request: %w", err)
 	}
 	req.Header.Set(SessionCustomHeader, c.SessionToken)
+
+	// Delete this custom cookie set in November 2022. This is just to remain
+	// backwards compatible with older versions of Coder.
+	req.AddCookie(&http.Cookie{
+		Name:  "session_token",
+		Value: c.SessionToken,
+	})
+
 	if body != nil {
 		req.Header.Set("Content-Type", "application/json")
 	}
