returning csrf token from edge middleware in static-optimized-example

kubetail-org · Oct 29, 2023 · a2da8e3 · a2da8e3
1 parent ec60aed
commit a2da8e3
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 10 deletions.
diff --git a/example-ts-appdir/app/static-optimized-example/csrf-token/route.ts b/example-ts-appdir/app/static-optimized-example/csrf-token/route.ts
diff --git a/example-ts-appdir/app/static-optimized-example/page.tsx b/example-ts-appdir/app/static-optimized-example/page.tsx
@@ -12,9 +12,9 @@ export default function Page() {
     // get form values
     const data = new FormData(ev.currentTarget);
 
-    // get token
-    const resp = await fetch('/static-optimized-example/csrf-token');
-    const { csrfToken } = await resp.json();
+    // get token (see middleware.ts)
+    const csrfResp = await fetch('/csrf-token');
+    const { csrfToken } = await csrfResp.json();
 
     // build fetch args
     const fetchArgs = { method: 'POST', headers: {}, body: JSON.stringify(data) };

diff --git a/example-ts-appdir/middleware.ts b/example-ts-appdir/middleware.ts
@@ -19,5 +19,10 @@ export async function middleware(request: NextRequest) {
     return new NextResponse('invalid csrf token', { status: 403 });
   }
 
+  // return token (for use in static-optimized-example)
+  if (request.nextUrl.pathname === '/csrf-token') {
+    return NextResponse.json({ csrfToken: response.headers.get('X-CSRF-Token') || 'missing' });
+  }
+
   return response;
 }