feat: add CSRF protection for state-mutating API routes by smartalee · Pull Request #1127 · rinafcode/teachLink_web

Run Type Check: src/middleware.ts#L35

Variable 'withHeaders' is used before being assigned.

Run Type Check: src/middleware.ts#L35

Block-scoped variable 'withHeaders' used before its declaration.

Run Type Check: src/middleware.ts#L17

'"./lib/csrfMiddleware"' has no exported member named 'getCsrfTokenFromCookies'. Did you mean 'getCSRFTokenFromCookie'?

Run Type Check: src/middleware.ts#L17

'"./lib/csrfMiddleware"' has no exported member named 'generateCsrfToken'. Did you mean 'generateCSRFToken'?

Run Type Check: src/middleware.ts#L17

Module '"./lib/csrfMiddleware"' has no exported member 'setCsrfCookie'.

Run Type Check: src/middleware.ts#L17

Module '"./lib/csrfMiddleware"' has no exported member 'validateCsrfRequest'.

Run Type Check: src/app/api/tips/route.ts#L3

Module '"@/lib/csrfMiddleware"' has no exported member 'getCsrfTokenFromHeaders'.

Run Type Check: src/app/api/tips/route.ts#L3

'"@/lib/csrfMiddleware"' has no exported member named 'getCsrfTokenFromCookies'. Did you mean 'getCSRFTokenFromCookie'?

Run Type Check: src/app/api/approvals/route.ts#L9

Module '"@/lib/csrfMiddleware"' has no exported member 'getCsrfTokenFromHeaders'.

Run Type Check: src/app/api/approvals/route.ts#L9

'"@/lib/csrfMiddleware"' has no exported member named 'getCsrfTokenFromCookies'. Did you mean 'getCSRFTokenFromCookie'?

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Navigation Menu