James Filtness

👍 for this. I also want to use csurf to validate `state` in an OAuth context.

For anyone needing csurf in the context of an OAuth callback you can use the following as a middleware: ``` const csrfProtection = csrf({ value: function(req) { // grab the...