How do I generate CSRF tokens in Express?

Question

newbie. I\'m using ExpressJS/Node. Here\'s my config stuff:

var express = require(\'express\'),
app = express.createServer(),
jade=require(\'jade\');
// Configu         


        

Answer 1

If you also want to set a secure cookie for your CSRF token that can be read by your frontend (angular for example), you can do this:

app.use csrf()

app.use (req, res, next) ->
  res.cookie('XSRF-TOKEN', req.csrfToken(), {secure: true})
next()