CSRF Hook

Wobe has a beforeHandler hook to manage CSRF.

Example

In this example all the requests without the origin equal to http://localhost:3000 will be blocked.

import { Wobe, csrf } from 'wobe'

const app = new Wobe()
	.beforeHandler(csrf({ origin: 'http://localhost:3000' }))
	.get('/hello', (context) => context.res.sendText('Hello world'))
	.listen(3000)

You can also have multiple origins.

import { Wobe, csrf } from 'wobe'

const app = new Wobe()
	.beforeHandler(
		csrf({ origin: ['http://localhost:3000', 'http://localhost:3001'] }),
	)
	.get('/hello', (context) => context.res.sendText('Hello world'))
	.listen(3000)

Or with a function.

import { Wobe, csrf } from 'wobe'

const app = new Wobe()
	.beforeHandler(
		csrf({ origin: (origin) => origin === 'http://localhost:3000' }),
	)
	.get('/hello', (context) => context.res.sendText('Hello world'))
	.listen(3000)

Options

• origin (string | string[] | ((origin: string) => string | undefined | null)) : The origin(s) that are allowed to make requests.