jwt-csrf
jwt-csrf copied to clipboard
Allow excluding domains when patching the xhr
There should be a way to exclude certain domains when making post requests. Sometimes, the request could be posted to another domain. There is no need to send the token to a different server and even if it is sent, due to CORS restrictions there may be errors when reading the header.