Variable checkCsrf

checkCsrf: (
sessionId: unknown,
body?: any,
) => { detail?: string; ok: boolean; reason: string } = ...

Type Declaration

- (
  sessionId: unknown,
  body?: any,
  ): { detail?: string; ok: boolean; reason: string }
- Checks that a POST carries the right CSRF token for its session, compared in constant time.
  
  A request with no session passes with reason: 'no-session'. A refusal (missing or mismatch) carries its error code.
  Parameters
  - sessionId: unknown
    the session id
  - Optionalbody: any
    the parsed form body
  Returns { detail?: string; ok: boolean; reason: string }
  { ok, reason, detail? }