Jinja integration

[thepabloaguilar]

Hello, thanks for your work on this lib! I'm using it in my FastAPI app and would like to know how I can integration the tokens with my Jinja templates like we do with Django. Is there a way?

Thanks

[frankie567]

Hi @thepabloaguilar 👋

So I guess your goal would be to have the CSRF token in a hidden input field, right? If so, I fear that it won't work very will with this library since it'll check for the challenge in a header, not in the form payload. For this purpose, I suggest you check out asgi-csrf which is designed to work this way.

[thepabloaguilar]

Yeah, exactly! It seems that asgi-csrf is what I was looking for, thanks a lot!

[abreumatheus]

With htmx we can pass a header to all requests done inside the body of a template. Any way we can access the token inside a template?

[frankie567]

I fear not. You should check out asgi-csrf which places the token in the request scope.