How to use Symfony CSRF Tokens with React JS

Question

I'm doing a SPA with Symfony and React JS, and my ask is how can I use the Symfony CSRF Token generator with react to avoid CSRF Attacks?

Answer 1

If you develop an SPA, then you're also building an API on Symfony side. (that's usually what people do)

Since CSRF issue is only related to forms and not APIs (because they usually are stateless), then you just do not manage CSRF issue. If we usually do not have this problem, keep in mind that you still need to deal with it if you use cookies/sessions . If you do so, then I recommand you to read the documentation of the csrf component of Symfony .

More insights here: https://security.stackexchange.com/questions/166724/should-i-use-csrf-protection-on-rest-api-endpoints