Replace csurf with csrf-sync

2025-10-31 11:05:54 +01:00 · 2023-01-29 20:31:21 +10:30
parent b00cd8be41
commit 5a994290f2
5 changed files with 22 additions and 5 deletions
--- a/src/middleware/csrf.js
+++ b/src/middleware/csrf.js
@@ -0,0 +1,15 @@
+'use strict';
+
+const { csrfSync } = require('csrf-sync');
+
+const {
+	generateToken,
+	csrfSynchronisedProtection,
+} = csrfSync({
+	size: 64
+});
+
+module.exports = {
+	generateToken,
+	csrfSynchronisedProtection,
+};