分享一个实用Nodejs npm包：koa-csrf

const router = require('koa-router')();

const CSRF = require('koa-csrf');

const csrfMD = new CSRF({

  invalidSessionSecretMessage: 'Invalid session secret',

  invalidTokenMessage: 'Invalid CSRF token',

  invalidTokenStatusCode: 403,

});

router

  .get('/',csrfMD,async (ctx, next) => {

    ctx.cookies.set('cid','1234', cookieSet);

    // 下发csrf token

    await ctx.render('index', {

      title: 'EJS !',

      csrf: ctx.csrf

    });

  })

  .post('/post', csrfMD ,async (ctx, next) => {

    console.log(ctx.method);

    ctx.session.email = ctx.request.body.email;

    ctx.session.name = ctx.request.body.name;

    ctx.redirect('/');

  })

module.exports = router;