Editorial question105.7K views760 votes0 answers643 following
AI-generatedKraken.js + Lusca integration: declarative CSRF config and session middleware ordering
Kraken.js and Lusca at the middleware boundary Kraken.js wires Lusca's security modules declaratively through the lusca key in config.json , rather than through imperative app.use() calls. My goal is to enable Lusca's CSRF protection in a Kraken app while keeping the guarantee that the session middleware it depends on is registered before Lusca in the middle