Make the docs actually useful.

[expressjs]

Make the docs actually useful.

[sjonnet19]

You can reference the Connect documentation.

http://www.senchalabs.org/connect/csrf.html

[Fishrock123]

Still needs proper examples.

[mattsintellectualproperty]

It would be awesome to have an example showing how to integrate session-based CSRF, just simple code examples with Express 4 would be a huge improvement. Right now I have found one article that explains how to do it in Express 4, but doesn't go into session-based CSRF, just cookies. As a bit of a noob to the security-layer, this would be nice to have in the module readme. Even a basic working code example with no documentation would be great!

[Fishrock123]

The only way I can understand to do it in a way relatable to real-world is to do the example in 3 parts; server, jade template and client js.

Which seems kinda excessive, but idk how to make it reasonably clear otherwise. Maybe I don't understand it enough.

[dougwilson]

@Fishrock123 what we need is a separate repo for everything in https://github.com/visionmedia/express/tree/master/examples (where each subfolder has their own package.json, even). Then we could add some for csrf and point people there in the docs here.

[mattsintellectualproperty]

@dougwilson +1 to that!

[Fishrock123]

Considering that everything is pretty broken apart into these modules, I don't see why minor commit logs for examples and a .npmignore'd /examples directory would be a problem in these modules.

I think in the end it may be more sane to maintain than a separate amalgamated repo.