@alirezaaminzadeh/csrf-shield
v0.1.0
Published
CSRF token generation and validation for Node.js web applications
Maintainers
Readme
csrf-shield
CSRF token generation and validation using the double-submit cookie pattern.
Install
npm install @alirezaaminzadeh/csrf-shieldUsage
import { generateToken, validateToken, csrfShield, csrfTokenMiddleware } from '@alirezaaminzadeh/csrf-shield';
import cookieParser from 'cookie-parser';
app.use(cookieParser());
app.use(csrfTokenMiddleware()); // sets cookie + res.locals.csrfToken
app.use(csrfShield()); // validates on POST/PUT/DELETE
// Include _csrf in body or x-csrf-token headerLicense
MIT
