Simple CSRF Protection Plugin

Helps ensure requests originate from JavaScript code, not from HTML forms or direct browser navigation.

When to Use

Beneficial if you store sensitive data (session/auth tokens) in cookies with SameSite=Lax (default) or SameSite=None.

Server

import { SimpleCsrfProtectionHandlerPlugin } from '@orpc/server/plugins'