Psifi-Solutions csrf-csrf issues

Psifi-Solutions / csrf-csrf

A utility package to help implement stateless CSRF protection using the Double Submit Cookie Pattern in express.

Other

123 stars 19 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Delimiter and http only support

#79 psibean closed 2 days ago
0
CSRF between two backends

#78 Nickk4 closed 2 weeks ago
4
generatToken returning csrfToken instead of cookieContent

#77 MaxVSCJP opened 2 weeks ago
1
Invalid CSRF token when accessing on IP address

#76 chr15m closed 1 month ago
3
Is the endpoint `/csrf-token` shown in the examples actually needed for protection?

#75 strazto closed 2 weeks ago
2
Issue with latest build

#74 khaleddrashadd closed 2 months ago
2
Chore/update with v3 changes

#73 psibean closed 2 months ago
0
feat: support optional stateless association of token with session

#72 psibean closed 3 months ago
1
csrf token cannot be overwriten on brave browser whlie redirecting via external link

#71 Sertturk16 closed 3 months ago
3
Upstream v3.0.6 to main

#70 psibean closed 3 months ago
0
Build/support versioned branches

#69 psibean closed 3 months ago
1
Log options - provide an event emitter API

#68 timtong1982 opened 3 months ago
4
Support Express-like frameworks

#67 Lordfirespeed opened 4 months ago
4
3.0.6 version in npm?

#66 seancolyer closed 3 months ago
3
Cookie invalid prefix

#65 juan-cyb closed 5 months ago
4
Types broken with tsc build

#64 psibean closed 3 months ago
6
Testing revamp

#63 psibean opened 7 months ago
0
Documentation revamp

#62 psibean opened 7 months ago
0
Feat/hmac token signing

#61 psibean opened 7 months ago
4
Feat/per token cookie settings

#60 psibean closed 7 months ago
0
Refactor/parameter cleanup

#59 psibean closed 7 months ago
1
feat: allow customizable error

#58 psibean closed 7 months ago
1
Why forcing httpOnly cookie flag?

#57 pbryant-xag opened 8 months ago
11
If the csrf cookie is changed manually after it is set, the application crashes even with get request and the error does not go to the handler

#56 Sertturk16 closed 7 months ago
6
How to change the error message returned?

#55 chr15m closed 7 months ago
3
Unable to get Node Express & React app working with csrf-csrf

#54 kashaf-s closed 9 months ago
12
Token hash problem

#53 hoshixlily closed 9 months ago
4
Token inaccessible from req.headers

#52 Jawad-Ali2 closed 9 months ago
5
The TypeScript compiler is unable to recognize the extended Request interface, specifically the csrfToken method.

#51 bkvishe closed 3 months ago
7
Why is setting a CSRF cookie or header not recommended?

#50 chr15m closed 9 months ago
1
Fix: Changes in DoubleCsrfConfig interface related to optional keys

#49 bkvishe closed 7 months ago
2
Update README.md

#48 kurtfurbush closed 7 months ago
0
refactor: move types into types.ts

#47 psibean closed 11 months ago
1
Unable to control cookie expiry (or cookie refresh) on a per generation basis

#46 1Map opened 11 months ago
5
chore: dependency bump

#45 psibean closed 11 months ago
0
chore: bump dependencies

#44 psibean closed 11 months ago
0
Improve CommonJS support

#43 etal2 closed 11 months ago
1
feat: allow to override cookie's httpOnly flag

#42 felixmosh closed 12 months ago
1
allow to override `httpOnly` field of the cookie

#41 felixmosh closed 12 months ago
25
docs: add docstrings to public methods

#40 davidgonmar closed 11 months ago
1
this is not an issue but i couldn't find it what we have to do for sending in frontend type hidden after we generate the token

#39 aveein closed 1 year ago
8
Update README.md

#38 Joniii11 closed 1 year ago
1
Feat/allow multiple secrets

#37 psibean closed 1 year ago
1
Invalid CSRF error after making ajax get call

#36 doaortu closed 1 year ago
6
ForbiddenError: invalid csrf token

#35 chamathjayasekara99 closed 1 year ago
1
Secret rotation does not work without overwrite

#34 gtudan closed 1 year ago
14
add types to package.json `exports` block

#33 Lordfirespeed closed 1 year ago
0
Package cannot be imported in TypeScript with `moduleResolution`: `NodeNext`

#32 Lordfirespeed closed 1 year ago
0
docs: add upgrade guide from 2.x to 3.x

#31 jasonraimondi closed 1 year ago
2
chore(release): 3.0.0

#30 psibean closed 1 year ago
0