How to get CSRF token from AdonisJs in VueJs?

Question

I work on a project with an API made with AdonisJS and a front end made with VueJS.

The API and the front are independant and the front consumes the API with axios calls.

I'm trying to make a POST request with axios from the front, but the request sends a 403 response because of the missing csrf token.

In a "classic" Adonis project with Edge template, I know how to get the csrf token with {{ csrfField() }}. But how can I achieve this in this case where the front is independant from the API ?

I tried to make a route /csrf that sends the token from the session :

async csrf ({response, session}) { return response.json({token: session.get('csrf-secret')}) }

Then in Vue, I made a first axios call to get the token from this route, and then, pass the token to a second axios post call.

But this solution does'nt work (I think because it's not the same session, and so, not the same token) and by the way, i found this method not very clean.

So, does anyone have an idea of how to do this ?

score 3 · Answer 1 · answered Jun 25 '18 at 07:43

3

I don't know adonis, but since adonis is similar to Laravel , you can do it their way. On Laravel there are route files for web and api. Web requires csrf_token while API won't, so basically you will put your routes on API but you won't have sessions etc. The other option is to make on the layout file that have the vuejs component a global window._csrf={{csrf_token()}} not sure how it is done on adonis. Then you will take it from the window object on vuejs. window._csrf

answered Jun 25 '18 at 07:43

Munteanu Petrisor

491
2
6

Thanks for your answer. As Adonis and Vue are totally independant, I'm not sure the second solution with `window._csrf={{csrf_token()}}` will work. But i'll try the solution using API routes that don't have csrf restrictions ! – Pochwar Jun 26 '18 at 12:05
it will work, the window object is global and you can access it everywhere – Munteanu Petrisor Jun 26 '18 at 13:37

score 0 · Answer 2 · answered Jan 07 '22 at 05:21

https://www.npmjs.com/package/universal-cookie universal cookies which is helps to set and get the value both server and client side

import Cookies from 'universal-cookie';
 
const cookies = new Cookies();
 
cookies.set('csrf', 'mytoken', { path: '/' });
console.log(cookies.get('csrf'));

How to get CSRF token from AdonisJs in VueJs?

2 Answers2