added excludePathPrefixes option and bumped version number to 1.0.3

README.md

@@ -129,8 +129,8 @@ Here are the default configuration values:
     httpOnly: true,
     sameSite: 'strict'
   },
+  excludePathPrefixes: ['/_next/'],
   ignoreMethods: ['GET', 'HEAD', 'OPTIONS'],
-  ignorePathPrefixes: ['/_next/'],
   saltByteLength: 8,
   secretByteLength: 18,
   token: {

package.json

@@ -1,7 +1,7 @@
 {
   "name": "edge-csrf",
   "description": "CSRF protection for Next.js middleware",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "author": "Andres Morey",
   "license": "MIT",
   "repository": "amorey/edge-csrf",

src/config.ts

@@ -27,8 +27,8 @@ export class TokenOptions {
 
 export class Config {
   cookie: CookieOptions = new CookieOptions()
+  excludePathPrefixes: string[] = ['/_next/']
   ignoreMethods: string[] = ['GET', 'HEAD', 'OPTIONS']
-  ignorePathPrefixes: string[] = ['/_next/']
   saltByteLength: number = 8
   secretByteLength: number = 18
   token: TokenOptions = new TokenOptions()

src/index.ts

@@ -22,8 +22,8 @@ export default function CreateMiddleware(opts?: Partial<ConfigOptions>): CSRFMid
     let secret: Uint8Array;
     let secretStr: string | undefined;
 
-    // check ignorePathPrefixes
-    for (const pathPrefix of config.ignorePathPrefixes) {
+    // check excludePathPrefixes
+    for (const pathPrefix of config.excludePathPrefixes) {
       if (request.nextUrl.pathname.startsWith(pathPrefix)) return null;
     }
 

test/index.test.ts

@@ -351,9 +351,9 @@ describe('config option tests', () => {
     })
   })
 
-  describe('ignorePathPrefixes', () => {
-    it('should respect configured ignorePathPrefixes', async () => {
-      const csrfProtect = csrf({ignorePathPrefixes: ['/ignore-me/sub-path/']})
+  describe('excludePathPrefixes', () => {
+    it('should respect configured excludePathPrefixes', async () => {
+      const csrfProtect = csrf({excludePathPrefixes: ['/ignore-me/sub-path/']})
 
       const request = new NextRequest('http://example.com/ignore-me/sub-path/file.jpg')
       const response = NextResponse.next()