alapa
Version:
A cutting-edge web development framework designed to revolutionize the way developers build modern web applications.
24 lines (23 loc) • 639 B
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.csrfErrorHandler = void 0;
const csrfErrorHandler = (
// eslint-disable-next-line @typescript-eslint/no-explicit-any
err, req, res, next) => {
if (err.code === "EBADCSRFTOKEN") {
// CSRF token mismatch or missing
if (req.path.startsWith("/api")) {
next();
}
else {
res
.setHeader("X-Error-Code", "CSRF_ERROR")
.status(403)
.render("errors/403");
}
}
else {
next(err);
}
};
exports.csrfErrorHandler = csrfErrorHandler;