csrf token handling, two jwt tokens

2025-11-26 14:25:49 -05:00
parent f3a356d64b
commit 8b10103ae4
8 changed files with 114 additions and 76 deletions
--- a/backend/server.js
+++ b/backend/server.js
@@ -108,6 +108,7 @@ app.use(
    origin: process.env.FRONTEND_URL || "http://localhost:3000",
    credentials: true,
    optionsSuccessStatus: 200,
+    exposedHeaders: ["X-CSRF-Token"],
  })
 );