Proper way of inject CSRF token in Angular

[sheerun]

+1

[jandudulski]

It wouldn't work if you don't have jQuery - built in angular.element will not find selector meta[name=csrf-token]. Proper solution:

meta = document.querySelector('meta[name=csrf-token]')
if meta && meta.hasAttribute('content')
  app.config ['$httpProvider', (provider) ->
    provider.defaults.headers.common['X-CSRF-Token'] = meta.getAttribute('content')
  ]

[sheerun]

querySelector is not supported on IE7

[jandudulski]

If you need to support ancient tools, use jQuery, or something similar.

[sheerun]

You may use jQuery on ancient tools, but snippet you provided won't work.

[sheerun]

Something like this will:

for meta in document.getElementsByTagName('meta')
  if meta.name.toLowerCase() == "csrf-token" && meta.content
    app.config ['$httpProvider', (provider) ->
      provider.defaults.headers.common['X-CSRF-Token'] = meta.content
    ]

[jandudulski]

You may use jQuery on ancient tools, but snippet you provided won't work.

You didn't understood me. With jQuery you can use angular.element from the PR.

[sheerun]

I think we need only one snippet

[jandudulski]

Sure, :+1: for your solution @sheerun :)

[sheerun]

@chytreg Could you update PR and merge?

[jandudulski]

done :)