Class CSRF

Returns CSRF

Returns Promise<readonly [string, null | string]>

A tuple with the token and the string to send in Set-Cookie If there's already a csrf value in the cookie then the token will be the same and the cookie will be null.

let [token, cookie] = await csrf.commitToken(request);
return json({ token }, {
  headers: { "set-cookie": cookie }
})
Copy

Returns string

A random string in Base64URL

Returns Promise<string>

The existing token if it exists in the cookie, otherwise a new token.

Returns Promise<void>

export async function action({ request }: ActionFunctionArgs) {
  await csrf.validate(request);
  // the request is authenticated and you can do anything here
}
Copy

export async function action({ request }: ActionFunctionArgs) {
  let formData = await request.formData()
  await csrf.validate(formData, request.headers);
  // the request is authenticated and you can do anything here
}
Copy

export async function action({ request }: ActionFunctionArgs) {
  let formData = await parseMultipartFormData(request);
  await csrf.validate(formData, request.headers);
  // the request is authenticated and you can do anything here
}
Copy

Returns Promise<void>

export async function action({ request }: ActionFunctionArgs) {
  await csrf.validate(request);
  // the request is authenticated and you can do anything here
}
Copy

export async function action({ request }: ActionFunctionArgs) {
  let formData = await request.formData()
  await csrf.validate(formData, request.headers);
  // the request is authenticated and you can do anything here
}
Copy

export async function action({ request }: ActionFunctionArgs) {
  let formData = await parseMultipartFormData(request);
  await csrf.validate(formData, request.headers);
  // the request is authenticated and you can do anything here
}
Copy