Interface CsrfProtectionOptions

interface CsrfProtectionOptions {
    bodyField?: string;
    cookie?: CsrfCookieAttributes;
    cookieName?: string;
    headerName?: string;
    now?: () => number;
    secret: string;
    ttlSeconds?: number;
}

Index

Properties

bodyField? cookie? cookieName? headerName? now? secret ttlSeconds?

Properties

`Optional` `Readonly`bodyField

bodyField?: string

`Optional` `Readonly`cookie

cookie?: CsrfCookieAttributes

`Optional` `Readonly`cookieName

cookieName?: string

`Optional` `Readonly`headerName

headerName?: string

`Optional` `Readonly`now

now?: () => number

Clock seam for tests.

`Readonly`secret

secret: string

Secret the signing key is derived from. Pass session.secret; the key itself is an HKDF expansion of it, never the secret.

`Optional` `Readonly`ttlSeconds

ttlSeconds?: number