csrf-token-fetcher

@shopify/csrf-token-fetcher

Caution

@shopify/csrf-token-fetcher is deprecated.

Shopifolk, see Shopify/quilt-internal for information on the latest packages available for use internally.

JavaScript utility function to fetch the CSRF token required to make requests to a Rails server.

Installation

yarn add @shopify/csrf-token-fetcher

API Reference

function getCSRFToken(scope = document)

Retrieve the CSRF token from the meta tag rendered by a Rails server. This token is required in the X-CSRF-Token header for requests to the Rails server.

In the html.erb file:

<%= csrf_meta_tags %>

Example Usage

import getCSRFToken from '@shopify/csrf-token-fetcher';

getCSRFToken();
// → 'token_value'