Setu-TS
    Preparing search index...

    Function getCsrfToken

    • Returns this session's CSRF token, minting and storing one on first call.

      Call it from whatever renders the form, and put the result in a hidden field named to match the configured fieldName (default _csrf). Minting marks the session dirty, so the token is committed with the response that carries the form.

      Parameters

      Returns string

      The token to embed in the form

      If SessionPlugin or RuntimePlugin is not registered

      If the session middleware did not run

      app.router.get('/login', (ctx) => {
        const token = getCsrfToken(ctx);
        return ctx.response.text(
          `<form method="post"><input type="hidden" name="_csrf" value="${token}"></form>`,
        );
      });

      0.2.0

    Settings
    Member Visibility