search

expressjs / csurf

CSRF token middleware
MIT License
2.3k stars 217 forks source link

Unable to get Angular and Express to use csrf #51

Closed maplesap closed 9 years ago

maplesap commented 9 years ago

I'm having some trouble getting both these frameworks to use and verify csrf. Main problem is that angular's csrf is always undefined and csurf doesn't seem to verify any tokens at all (the app.post('/login') is always run successfully as though csurf was never integrated).

Here is my attempt at getting a register form to use csrf: https://github.com/maplesap/csrf_test

You can run it with node app.js and then visit /register to see the problem. Can anyone help?

dougwilson commented 9 years ago

We don't know anything about Angular, unfortunately. You may get an answer if you posted this on Stackoverflow.com