orpc-simple-csrf-protection

What problem does it solve?

This Skill adds basic CSRF protection to your oRPC application, ensuring that requests originate from JavaScript code and not from HTML forms or direct browser navigation.

Core Features & Use Cases

• CSRF Protection: Helps ensure requests originate from JavaScript code.
• Use Case: Ideal for applications that store sensitive data in cookies with SameSite=Lax or SameSite=None.

Quick Start

Add the Simple CSRF Protection Plugin to your oRPC application using the following code:

import { SimpleCsrfProtectionHandlerPlugin } from '@orpc/server/plugins';
const handler = new RPCHandler(router, {
  strictGetMethodPluginEnabled: false,
  plugins: [
    new SimpleCsrfProtectionHandlerPlugin()
  ],
});