Function createCSRFToken

packages/auth-server/src/server/csrf.ts:18–27

()

 */

export function createCSRFToken() {
  // New CSRF token
  const csrfToken = randomBytes(32).toString('hex');
  const csrfTokenHash = createHash('sha256')
    .update(`${csrfToken}${process.env.NEXTAUTH_SECRET}`)
    .digest('hex');
  const token = `${csrfToken}|${csrfTokenHash}`;

  return token;
}

export function verifyCSRFToken(token: string) {
  const [csrfToken, csrfTokenHash] = token.split('|');