From 837e2ea13fd0a05b2385f08ba40f024e4c123085 Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Tue, 6 Jan 2026 12:58:17 -0600
Subject: [PATCH] Fix CSRF token error in impersonation banner

Replace raw HTML form with Phoenix .link helper using method="delete" to properly handle CSRF token in LiveView context. This fixes the UndefinedFunctionError when accessing /admin route.
---
 lib/towerops_web/components/layouts.ex | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/lib/towerops_web/components/layouts.ex b/lib/towerops_web/components/layouts.ex
index 045a548e..a377730d 100644
--- a/lib/towerops_web/components/layouts.ex
+++ b/lib/towerops_web/components/layouts.ex
@@ -87,16 +87,13 @@ defmodule ToweropsWeb.Layouts do
                   Impersonating: {@current_scope.user.email}
                 </span>
               </div>
-              <form action={~p"/admin/impersonate"} method="post">
-                <input type="hidden" name="_csrf_token" value={Phoenix.Controller.get_csrf_token()} />
-                <input type="hidden" name="_method" value="delete" />
-                <button
-                  type="submit"
-                  class="px-3 py-1 bg-white text-yellow-900 hover:bg-yellow-50 rounded font-medium text-sm"
-                >
-                  Exit Impersonation
-                </button>
-              </form>
+              <.link
+                href={~p"/admin/impersonate"}
+                method="delete"
+                class="px-3 py-1 bg-white text-yellow-900 hover:bg-yellow-50 rounded font-medium text-sm"
+              >
+                Exit Impersonation
+              </.link>
             </div>
           </div>
         </div>