useCsrf() is undefined

[n4an]

Request header
Csrf-Token: undefined

ssr: false,

security: {
enabled: true,
    csrf: { // optional
      https: false, // default true if in production
      cookieKey: '', // "__Host-csrf" if https is true otherwise just "csrf"
      cookie: { // CookieSerializeOptions from unjs/cookie-es
        path: '/',
        httpOnly: true,
        sameSite: 'strict'
      },
      methodsToProtect: ['POST', 'PUT', 'PATCH'], // the request methods we want CSRF protection for
      // excludedUrls: ['/nocsrf1', ['/nocsrf2/.*', 'i']], // any URLs we want to exclude from CSRF protection
      // encryptSecret: /** a 32 bits secret */, // random bytes by default
      encryptAlgorithm: 'aes-256-cbc'
    },
}

await useCsrfFetch('api/auth/signup', {
      body: payload,
      method: 'POST',
    });


const { csrf } = useCsrf(); // undefined

Cookie:
csrf=3c8a73c6-690c-48f2-92b4-3b100ef352ae;

[n4an]

It is for SSR only?

export function useCsrf() {
  const nuxtApp = useNuxtApp();
  if (process.server) {
    const res = nuxtApp.ssrContext?.event.node.res ?? {};
    if ("_csrftoken" in res) {
      nuxtApp.payload.csrfToken = res._csrftoken;
    }
  }
  return { csrf: nuxtApp.payload.csrfToken };
}

[Baroshem]

Hey,

In the current version yes, but just in time, the author of the package that provides CSRF for Nuxt Security have fixed that in Morgbn/nuxt-csurf#8

I will be bumping nuxt csurf in the upcominng 1.0.0 version of NuxtSecurity

Stay tuned!