-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Since @csrf-armor/core is already framework-agnostic, would you consider adding a Nuxt adapter similar to @csrf-armor/nextjs?
The Nuxt integration could provide:
- Server middleware for token generation and validation
- Composables (
useCsrfToken) for client-side token access - Support for both SSR and client-side rendering
Currently there is no actively maintained Nuxt CSRF library implementing the Signed Double Submit Cookie pattern. The closest option is nuxt-csurf (448k monthly downloads) but it uses AES-256-CBC encryption instead of HMAC signing and has had no activity since October 2024 (10 open issues unaddressed).
Having @csrf-armor/nuxt would fill that gap and make csrf-armor the go-to CSRF solution across both major SSR frameworks (Next.js and Nuxt).
I'd be happy to contribute if there's interest.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels