New token on every request issue.

[kleb741985]

Hi! I'm trying to configure csrf-csrf on my application.

The issue I'm running into is that the csrf token is changing on every request. I wouldn't want this to happen as this would hinder the user experience (for instance, when opening multiple tabs).

Basically whenever a page is rendered, I call the generateCsrfToken utility. This will validate the 2 tokens (the cookie and the request header). The thing is that the validation will fail as the rendering (GET) request is only sending the cookie, not the header (as it's actually trying to get one). This will make it so that the cookie changes on every request.

I feel like I'm making a very basic mistake, but I'd love to hear your thoughts on it. Thanks!