CSRF per route

[moshetanzer]

Hi,

Love your library.

Can you have CSRF enabled globally and per route disable (for e.g., logout endpoints etc..)

This doesnt work

 '/api/auth/logout': {
      security: {
        csrf: false
      }
    }

[vejja]

Hi @moshetanzer Under the hood we use the Nuxt-Csurf module by @Morgbn, which has route-level support, so I think it should be available under its native csurf option key. Could you try to do

'/api/auth/logout': {
  csurf: false
}

And let me know if it works ?

[moshetanzer]

yip, suspected that 😄. Should I add a pr to docs or to codebase?

Thanks

[vejja]

Yes please, that would be wonderful ! Thanks

[Baroshem]

Thanks guys!