Function postWithCsrfTokenRotate

packages/security/test/csrf.test.ts:40–55

}

const postWithCsrfTokenRotate = async app => {
  const request = await createHttpRequest(app);
  const preResponse = await request.get('/csrf').expect(200);
  const response = await request.get('/rotate').expect(200);
  const csrfToken = response.text;
  assert.ok(response.text && preResponse.text !== response.text);
  const body = {
    _csrf: csrfToken,
    test: Date.now()
  };
  await request.post('/body')
    .set('Cookie', response.headers['set-cookie'])
    .send(body)
    .expect(200)
    .expect(body);
}

const return403WithoutCsrfToken = async app => {
  const request = await createHttpRequest(app);