express-csrf-local

Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.

express-csrf-local ==================

Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.

npm install express-csrf-local
var express = require('express');
var app = express();
 
app.configure(function() {
  // configurations 
  // ... 
  app.use(express.csrf());
  app.use(require('express-csrf-local')('csrf_token'));
  // ... 
});

The string argument express-csrf-local is invoked with is the name of the local that will be contain the CSRF token. This argument is optional and if it's not provided, the name of the local will default to token.

Be sure to register the CSRF middleware before registering the middleware provided by express-csrf-token, otherwise you'll run into issues.

npm install
npm test

Found a bug? Create an issue on GitHub.

https://github.com/jharding/express-csrf-local/issues

For transparency and insight into the release cycle, releases will be numbered with the follow format:

<major>.<minor>.<patch>

And constructed with the following guidelines:

  • Breaking backwards compatibility bumps the major
  • New additions without breaking backwards compatibility bumps the minor
  • Bug fixes and misc changes bump the patch

For more information on semantic versioning, please visit http://semver.org/.

Copyright (c) 2012 Jake Harding
Licensed under the MIT License.