issues
search
Psifi-Solutions
/
csrf-csrf
A utility package to help implement stateless CSRF protection using the Double Submit Cookie Pattern in express.
Other
110
stars
17
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
feat: support optional stateless association of token with session
#72
psibean
closed
2 weeks ago
1
csrf token cannot be overwriten on brave browser whlie redirecting via external link
#71
Sertturk16
closed
2 weeks ago
3
Upstream v3.0.6 to main
#70
psibean
closed
1 month ago
0
Build/support versioned branches
#69
psibean
closed
1 month ago
1
Log options - provide an event emitter API
#68
timtong1982
opened
1 month ago
4
Support Express-like frameworks
#67
Lordfirespeed
opened
1 month ago
4
3.0.6 version in npm?
#66
seancolyer
closed
2 weeks ago
3
Cookie invalid prefix
#65
juan-cyb
closed
2 months ago
4
Types broken with tsc build
#64
psibean
closed
2 weeks ago
6
Testing revamp
#63
psibean
opened
5 months ago
0
Documentation revamp
#62
psibean
opened
5 months ago
0
Feat/hmac token signing
#61
psibean
opened
5 months ago
4
Feat/per token cookie settings
#60
psibean
closed
5 months ago
0
Refactor/parameter cleanup
#59
psibean
closed
5 months ago
1
feat: allow customizable error
#58
psibean
closed
5 months ago
1
Why forcing httpOnly cookie flag?
#57
pbryant-xag
opened
5 months ago
11
If the csrf cookie is changed manually after it is set, the application crashes even with get request and the error does not go to the handler
#56
Sertturk16
closed
5 months ago
6
How to change the error message returned?
#55
chr15m
closed
5 months ago
3
Unable to get Node Express & React app working with csrf-csrf
#54
kashaf-s
closed
6 months ago
12
Token hash problem
#53
hoshixlily
closed
6 months ago
4
Token inaccessible from req.headers
#52
Jawad-Ali2
closed
7 months ago
5
The TypeScript compiler is unable to recognize the extended Request interface, specifically the csrfToken method.
#51
bkvishe
closed
2 weeks ago
7
Why is setting a CSRF cookie or header not recommended?
#50
chr15m
closed
7 months ago
1
Fix: Changes in DoubleCsrfConfig interface related to optional keys
#49
bkvishe
closed
5 months ago
2
Update README.md
#48
kurtfurbush
closed
5 months ago
0
refactor: move types into types.ts
#47
psibean
closed
8 months ago
1
Unable to control cookie expiry (or cookie refresh) on a per generation basis
#46
1Map
opened
8 months ago
5
chore: dependency bump
#45
psibean
closed
8 months ago
0
chore: bump dependencies
#44
psibean
closed
8 months ago
0
Improve CommonJS support
#43
etal2
closed
8 months ago
1
feat: allow to override cookie's httpOnly flag
#42
felixmosh
closed
9 months ago
1
allow to override `httpOnly` field of the cookie
#41
felixmosh
closed
9 months ago
25
docs: add docstrings to public methods
#40
davidgonmar
closed
8 months ago
1
this is not an issue but i couldn't find it what we have to do for sending in frontend type hidden after we generate the token
#39
aveein
closed
9 months ago
8
Update README.md
#38
Joniii11
closed
10 months ago
1
Feat/allow multiple secrets
#37
psibean
closed
10 months ago
1
Invalid CSRF error after making ajax get call
#36
doaortu
closed
10 months ago
6
ForbiddenError: invalid csrf token
#35
chamathjayasekara99
closed
11 months ago
1
Secret rotation does not work without overwrite
#34
gtudan
closed
10 months ago
14
add types to package.json `exports` block
#33
Lordfirespeed
closed
11 months ago
0
Package cannot be imported in TypeScript with `moduleResolution`: `NodeNext`
#32
Lordfirespeed
closed
11 months ago
0
docs: add upgrade guide from 2.x to 3.x
#31
jasonraimondi
closed
1 year ago
2
chore(release): 3.0.0
#30
psibean
closed
1 year ago
0
refactor/reverse generate token parameter order
#29
psibean
closed
1 year ago
0
Reuse session csrf token
#28
davidgonmar
closed
1 year ago
2
Update README.md
#27
Miasmus1
closed
1 year ago
0
chore: bump security supported version
#25
psibean
closed
1 year ago
0
docs: add async example
#24
psibean
closed
1 year ago
0
Enforce http only option
#23
psibean
closed
1 year ago
0
build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4
#22
dependabot[bot]
closed
1 year ago
1
Next