From f2fea38e104b04106d26f92505397e210abde480 Mon Sep 17 00:00:00 2001
From: naiba <hi@nai.ba>
Date: Tue, 26 May 2026 04:00:15 +0000
Subject: [PATCH] fix(cron): switch manual trigger to POST to match backend
 CSRF fix

Backend GHSA-8qhj-4f8c-j8qg moves /api/v1/cron/:id/manual from GET to
POST so SameSite=Lax cookies no longer expose this state-changing
endpoint to cross-site CSRF. Update runCron() accordingly.

Co-authored-by: cloudcode <cloudcode@users.noreply.github.com>
---
 src/api/cron.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/api/cron.ts b/src/api/cron.ts
index 13238d5..5a6fed6 100644
--- a/src/api/cron.ts
+++ b/src/api/cron.ts
@@ -15,5 +15,5 @@ export const deleteCron = async (id: number[]): Promise<void> => {
 }
 
 export const runCron = async (id: number): Promise<void> => {
-    return fetcher<void>(FetcherMethod.GET, `/api/v1/cron/${id}/manual`, null)
+    return fetcher<void>(FetcherMethod.POST, `/api/v1/cron/${id}/manual`, null)
 }