From d572bc469eec56b351abebbcd0ae0c5c834d69d5 Mon Sep 17 00:00:00 2001
From: Johannes Meyer <johannes.meyer@icinga.com>
Date: Wed, 18 Sep 2024 09:34:20 +0200
Subject: [PATCH] CommandActions: Force a form's HTTP method for api requests

---
 library/Icingadb/Common/CommandActions.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/library/Icingadb/Common/CommandActions.php b/library/Icingadb/Common/CommandActions.php
index af7d19428..eb161995f 100644
--- a/library/Icingadb/Common/CommandActions.php
+++ b/library/Icingadb/Common/CommandActions.php
@@ -215,6 +215,7 @@ protected function handleApiRequest(CommandForm $form)
         });
 
         $form->handleRequest($this->getServerRequest());
+        $this->assertHttpMethod($form->getMethod());
 
         $errors = [];
         foreach ($form->getElements() as $element) {