How to insert the token in the form

[kemalcr]

How to insert the token in the form

[sdogruyol]

Thanks @MisterBianco 👍 I've added a subsection to Kemal Guide http://kemalcr.com/guide/#sessions

[MisterBianco]

I am not sure why no one has answered this till now. I am a little disappointed, however, after spending some time looking at other implementations I have found a method that works for me and I hope works for you.

<input type="hidden" name="_csrf" value="<%= env.session.string("csrf") %>">

[greenbigfrog]

FYI: The default parameter name is authenticity_token, so your code should be:

<input type="hidden" name="authenticity_token" value="<%= env.session.string("csrf") %>"/>

I've submitted a PR to fix this in the Guide: https://github.com/kemalcr/kemal-csrf/blob/master/src/kemal-csrf.cr#L14