Next CSRF
+ +
+ Get started by editing{" "}
+ pages/index.js
+
+
+
+
+
+ Send a request with a valid CSRF token
+ ++ Open the Web Console and click in the button below to see how a + valid request works. +
+ + +
+
+ Send a request without the CSRF token
+ ++ Because any request we send from the browser will have a cookie + with the token attached, try to send a request from a terminal and + see what happens with a missing or an invalid CSRF token. +
+ +
+
+ $ curl -X POST http://localhost:3000/api/protected
+
+
+
+
+
+ {`>> {"message": "Invalid CSRF token"}`}
+
+
+