Function verifyCSRFToken

packages/auth-server/src/server/csrf.ts:29–36

(token: string)

}

export function verifyCSRFToken(token: string) {
  const [csrfToken, csrfTokenHash] = token.split('|');
  const expectedCsrfTokenHash = createHash('sha256')
    .update(`${csrfToken}${process.env.NEXTAUTH_SECRET}`)
    .digest('hex');

  return csrfTokenHash === expectedCsrfTokenHash;
}