keslert
Cached pages (Cloudflare) + CSRF Tokens?
I have a site with a large number of pages. I use Cloudflare to cache a majority of these pages. Users can login. I use javascript to add user-specific widgets to the cached pages. Certain pages allow the user to send ajax requests to update the database. In the past, for these pages, I’ve turned off caching so I can send a csrf_token in the response. But now I want to add functionality to cached pages that will allow the user to favorite the page (or an item on the page). Is there a recommended way for handling this without disabling Cloudflare caching? If possible, I’d also like to allow a visitor to register from a cached page via an ajax form.
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Develop your skills with books, videos, and courses.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #websockets
- #elixirconf-us
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #performance
- #security
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Enabling companies to succeed by building software people love.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
First Post!
Exadra37
Cache is for content that doesn’t change, anything else you try to do with dynamic content on cached pages is asking for trouble and shooting yourself on the foot.
That being said I would recommend you to give a look into turbolinks or unpoly to use or not in conjunction with Live View in order to have fast browsing around your site without the need to cache the pages you need to have dynamic content on them.