Configures XSRF protection support for outgoing requests.

See more...

class HttpClientXsrfModule {
  static disable(): ModuleWithProviders<HttpClientXsrfModule>
  static withOptions(options: { cookieName?: string; headerName?: string; } = {}): ModuleWithProviders<HttpClientXsrfModule>
}

Description

For a server that supports a cookie-based XSRF protection system, use directly to configure XSRF protection with the correct cookie and header names.

If no names are supplied, the default cookie name is XSRF-TOKEN and the default header name is X-XSRF-TOKEN.

Static methods

Providers

HttpXsrfInterceptor

{ provide: HTTP_INTERCEPTORS, useExisting: HttpXsrfInterceptor, multi: true }

{ provide: HttpXsrfTokenExtractor, useClass: HttpXsrfCookieExtractor }

withXsrfConfiguration({
    cookieName: XSRF_DEFAULT_COOKIE_NAME,
    headerName: XSRF_DEFAULT_HEADER_NAME
}).ɵproviders

{ provide: XSRF_ENABLED, useValue: true }