auth.provider API
    Preparing search index...

    Interface CsrfGuardOptions

    interface CsrfGuardOptions {
        csrf: CsrfProtection;
        logger?: Logger;
        trustedOrigins?: readonly string[];
    }
    Index
    logger?: Logger
    trustedOrigins?: readonly string[]

    Origins other than the server's own that may satisfy the origin arm.

    Deliberately not cors.allowedOrigins: "this origin may read my responses" and "this origin may make me change state" are two decisions, and #272 was filed because one list was answering both.