'use strict';

const csrf = require('csurf');
const csrfInit = csrf();

module.exports = (req, res, next) => {
    return csrfInit(req, res, (e) => {
        res.locals.csrfToken = req.csrfToken();

        e && (e.code = 403);

        return next(e);
    });
};