Revel tests and CSRF protected application

[ghost]

Has anybody ever used Revel tests with CSRF protected application? How tests can get CSRF token?

I can come up with the following solutions:

1. Parse some page and get token
2. Create an action which will return token when in dev mode.

Is there a better (less workaroundish) solution? How is this problem being solved in other frameworks?

Here is what I've managed to find:

1. Node.js/Express related solution: http://stackoverflow.com/questions/18773846/how-to-test-endpoints-protected-by-csrf-in-node-js-express
   • Parse cookie received by tests and find token there
   • When in dev mode use a constant for token rather than a random string
2. SAP in response to GET request with header X-CSRF-Token Value : Fetch returns token: https://scn.sap.com/thread/3484244

[ghost]

There is an official CSRF protection module now. I'm closing this in favor of a discussion in Revel issues.