Answered Ajax request validation with CSRF token

Hello.

Sorry fo English

I use Modx Revolution 2.4.2-pl. Realized Ajax requests with snippet and resource page.

Question: How and where I can develop CSRF token in Modx?

For example: when user get page - on meta tag or in javascript for page modx generate CSRF token - then on ajax request on backend modx check token

If the user is logged in, MODX supplies a token that can be accessed with the getUserToken class method. See https://rtfm.modx.com/revolution/2.x/developing-in-modx/advanced-development/validating-requests-tokens-and-nonces

Quote from: sottwell at Dec 15, 2015, 01:45 AM

If the user is logged in, MODX supplies a token that can be accessed with the getUserToken class method. See https://rtfm.modx.com/revolution/2.x/developing-in-modx/advanced-development/validating-requests-tokens-and-nonces

Thanks. I understand.

But, I don't need to register user or login. It is simple public page with ajax search.
I just want to validate ajax requests from that page.

Quote from: sottwell at Dec 15, 2015, 02:03 AM

You might be interested in AjaxForm, which has a built-in "action key" that acts in much the same way. https://github.com/bezumkin/AjaxForm

Thanks. Will watch