Security

import csurf from 'csurf'

// Helper method to wait for a middleware to execute before continuing
// And to throw an error when an error happens in a middleware
export function csrf(req, res) {
    return new Promise((resolve, reject) => {
        csurf({ cookie: true })(req, res, (result) => {
            if (result instanceof Error) {
                return reject(result)
            }
            return resolve(result)
        })
    })
}

export default csrf

export default async function handler(req, res) {
  await csrf(req, res);
  res.status(200).json({ name: 'John Doe' })
}

// for single page use setting in pages/**/*.js
export async function getServerSideProps(context) {
    const { req, res } = context
    await csrf(req, res)
    return {
        props: { csrfToken: req.csrfToken() },
    }
}

// for whole app use setting in pages/_app.js
MyApp.getInitialProps = async ({ Component, ctx }) => {
    const { req, res } = ctx;
    await csrf(req, res);
    const pageProps = {
        csrfToken: ctx.req.csrfToken(),
    };
})

fetch('/api/hello', {
    headers:{
        'CSRF-Token': csrfToken
    }
})