fix error response error csrf invalid

Author: khanh2906

README.md

@@ -154,17 +154,17 @@ app.use(csrf.generate({
 
 - Default errorResponse is
 ```javascript
-errorResponse: (req, res, next) => {
-  return res.status(403).send('CSRF token invalid');
+errorResponse: (req, res) => {
+  res.status(403).send('CSRF token invalid');
 }
 ```
 
 - When you custom
 
 ```javascript
 // when you custom
-const newErrorResponse = (req, res, next) => {
-  return res.status(403).render('<h1>CSRF token invalid</h1>');
+const newErrorResponse = (req, res) => {
+  res.status(403).render('<h1>CSRF token invalid</h1>');
 }
 app.use(csrf.generate({
   errorResponse: newErrorResponse

lib/cjs/index.js

@@ -84,8 +84,8 @@ let csrf = {
 	getTransmitToken: (req) => {
 		return req.body._csrf || req.headers['csrf-token'];
 	},
-	errorResponse: (req, res, next) => {
-		return res.status(403).send('CSRF token invalid');
+	errorResponse: (req, res) => {
+		res.status(403).send('CSRF token invalid');
 	}
 }
 
@@ -155,7 +155,7 @@ module.exports = {
 				const token = csrf.getTransmitToken(req);
 
 				if (!token || token !== csrf.getToken(req)) {
-					return csrf.errorResponse(req, res, next)
+					return csrf.errorResponse(req, res)
 				} else {
 					console.info("DELETE CSRF TOKEN: ", token)
 					csrf.clearToken(req, res)

lib/esm/index.js

@@ -84,8 +84,8 @@ let csrf = {
 	getTransmitToken: (req) => {
 		return req.body._csrf || req.headers['csrf-token'];
 	},
-	errorResponse: (req, res, next) => {
-		return res.status(403).send('CSRF token invalid');
+	errorResponse: (req, res) => {
+		res.status(403).send('CSRF token invalid');
 	}
 }
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knfs-tech/csrf",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Cross-site request forgery module",
   "main": "./lib/cjs/index.js",
   "module": "./lib/esm/index.js",

tests/units/csrf.spec.js

@@ -73,7 +73,6 @@ describe('CSRF Middleware', () => {
 
 			csrfMiddleware.protect(req, res, next);
 
-			expect(next).toHaveBeenCalled();
 			expect(res.status).not.toHaveBeenCalled();
 		});
 
@@ -84,7 +83,6 @@ describe('CSRF Middleware', () => {
 
 			csrfMiddleware.protect(req, res, next);
 
-			expect(next).not.toHaveBeenCalled();
 			expect(res.status).toHaveBeenCalledWith(403);
 			expect(res.send).toHaveBeenCalledWith('CSRF token invalid');
 		});