feat: use csrf protection

This commit is contained in:
karishmas6
2024-09-23 23:47:10 +05:30
parent 4186c9572e
commit 4c045683ff

View File

@@ -4,10 +4,14 @@ import cors from 'cors';
import 'dotenv/config'; import 'dotenv/config';
import { record, workflow, storage, auth, integration } from './routes'; import { record, workflow, storage, auth, integration } from './routes';
import { BrowserPool } from "./browser-management/classes/BrowserPool"; import { BrowserPool } from "./browser-management/classes/BrowserPool";
import logger from './logger' import logger from './logger';
import cookieParser from 'cookie-parser';
import csrf from 'csurf';
import { SERVER_PORT } from "./constants/config"; import { SERVER_PORT } from "./constants/config";
import { Server } from "socket.io"; import { Server } from "socket.io";
const csrfProtection = csrf({ cookie: true })
const app = express(); const app = express();
app.use(cors()); app.use(cors());
app.use(express.json()); app.use(express.json());
@@ -25,6 +29,9 @@ export const io = new Server(server);
*/ */
export const browserPool = new BrowserPool(); export const browserPool = new BrowserPool();
app.use(csrfProtection)
app.use('/record', record); app.use('/record', record);
app.use('/workflow', workflow); app.use('/workflow', workflow);
app.use('/storage', storage); app.use('/storage', storage);