View Globals

csrfToken

Description

csrfToken is a global variable injected into View Engine. It sole purpose is to provide you easy access of CSRF token inside your view template.

Usage

Your route file:

test.js

...
return {
  method: 'POST',
  middleware: 'security:csrf',
  handler: ctx => {
    ctx.render('/test')
  }
}
...
  

Your view template:

test.html

{% extends '/layout' %}
<form method="POST">
  <input type="hidden" name="_csrf" value="{{ securityCsrfToken }}">
  ...
</form>