Skip to content

Feature request: Nuxt adapter (@csrf-armor/nuxt) #38

@Jorgagu

Description

@Jorgagu

Since @csrf-armor/core is already framework-agnostic, would you consider adding a Nuxt adapter similar to @csrf-armor/nextjs?

The Nuxt integration could provide:

  • Server middleware for token generation and validation
  • Composables (useCsrfToken) for client-side token access
  • Support for both SSR and client-side rendering

Currently there is no actively maintained Nuxt CSRF library implementing the Signed Double Submit Cookie pattern. The closest option is nuxt-csurf (448k monthly downloads) but it uses AES-256-CBC encryption instead of HMAC signing and has had no activity since October 2024 (10 open issues unaddressed).

Having @csrf-armor/nuxt would fill that gap and make csrf-armor the go-to CSRF solution across both major SSR frameworks (Next.js and Nuxt).

I'd be happy to contribute if there's interest.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions