angularcsrfjsdata

How do I configure JSData with cookie-based sessions and CSRF headers?


I need to set up my JSData configuration to pass along info for cookie-based session authentication, as well as CSRF headers.


Solution

  • When instantiating the HttpAdapter, use the following to set withCredentials (read more) and the CSRF header (example below sets the X-CSRFToken header, but that's specific to the server-side framework; it might be something else in others' cases).

    const adapter = new HttpAdapter({
        ...
        httpConfig: {
            withCredentials: true // send cookie-based session credentials
        },
        ...
        beforeHTTP: function(config, opts) {
            ...
            config.headers || (config.headers = {});
            config.headers['X-CSRFToken'] = token;
            ...
            return HttpAdapter.prototype.beforeHTTP.call(this, config, opts);
        }
    })
    

    Getting the value for token can be done in different ways, e.g. basic version, Angular 2+ version, etc.