express-csrf-local
Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.
Installation
npm install express-csrf-local
Usage
var express = require('express');
var app = express();
app.configure(function() {
// configurations
// ...
app.use(express.csrf());
app.use(require('express-csrf-local')('csrf_token'));
// ...
});
The string argument express-csrf-local
is invoked with is the name of the local that will be contain the CSRF token. This argument is optional and if it's not provided, the name of the local will default to token
.
Be sure to register the CSRF middleware before registering the middleware provided by express-csrf-token
, otherwise you'll run into issues.
Testing
npm install
npm test
Issues
Found a bug? Create an issue on GitHub.
https://github.com/jharding/express-csrf-local/issues
Versioning
For transparency and insight into the release cycle, releases will be numbered with the follow format:
<major>.<minor>.<patch>
And constructed with the following guidelines:
- Breaking backwards compatibility bumps the major
- New additions without breaking backwards compatibility bumps the minor
- Bug fixes and misc changes bump the patch
For more information on semantic versioning, please visit http://semver.org/.
License
Copyright (c) 2012 Jake Harding
Licensed under the MIT License.