hapijs / crumb

CSRF crumb generation and validation for hapi
Other
171 stars 50 forks source link

example/restful.js #115

Closed schwamic closed 5 years ago

schwamic commented 6 years ago

I tested your example with Postman. Unfortunately I got a 403-forbidden despite X-CSRF token in the header. It's because of two different tokens in crumb:

header S5FIlACcOaM7BVgEPM1YxMaHRyGyETHF3jUShHhaVnv
request.plugins.crumb hyUp7IW6Q_J7EWAmSIMH9zaZC5T0t71vvXZeX2TEmwQ
spanditcaa commented 6 years ago

confirmed

MeiyappanKannappa commented 5 years ago

Were you able to fix?

lock[bot] commented 4 years ago

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.