diff --git a/api/src/app.ts b/api/src/app.ts index 9c92a80f9d3..120be3c1444 100644 --- a/api/src/app.ts +++ b/api/src/app.ts @@ -25,7 +25,7 @@ import security from './plugins/security'; import auth from './plugins/auth'; import bouncer from './plugins/bouncer'; import errorHandling from './plugins/error-handling'; -import csrf, { CSRF_COOKIE, CSRF_HEADER } from './plugins/csrf'; +import csrf from './plugins/csrf'; import notFound from './plugins/not-found'; import * as publicRoutes from './routes/public'; import * as protectedRoutes from './routes/protected'; @@ -115,11 +115,11 @@ export const build = async ( requestInterceptor: req => { const csrfTokenCookie = document.cookie .split(';') - .find(str => str.includes(CSRF_COOKIE)); + .find(str => str.includes('csrf_token')); const [_key, csrfToken] = csrfTokenCookie?.split('=') ?? []; // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access - if (csrfToken) req.headers[CSRF_HEADER] = csrfToken.trim(); + if (csrfToken) req.headers['csrf-token'] = csrfToken.trim(); return req; } }