unable to implement crumb for csrf protection in application with api's developed using hapi and front end developed using angular about crumb HOT 3 CLOSED

@milya I've achieved working CSRF with React application by making the Hapi application serve my React application and injecting into the index.html the raw CSRF token (in a script tag to make it available on window or something like that). Then when I make an XHR call within my React app, I would send the raw token inside the X-CSRF-Token header. crumb will then compare the token sent inside the XHR call and the encoded one in the crumb cookie. Make sure to have restful to true to be able to use the header.

from crumb.

closing, answered.

from crumb.

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.

from crumb.