Error: misconfigured csrf - Express JS 4

Question

I am trying to enable the csrf module of Express 4 in an existing application.

I have added the following code:

var csrf = require(\'csurf\')
...

ap         


        

Answer 1

I have found the solution. The call to app.use(csrf()) must be set after app.use(cookieParser()) AND app.use(session({...}).

Answer 2

If you're using Redis as a session store and the server isn't running, you will also get a misconfigured error.

https://github.com/expressjs/csurf/issues/73