Server-side Firebase Auth CSRF - https://github.com/expressjs/csurf About Cross Site Forgery (CSRF) https://en.wikipedia.org/wiki/Cross-site_request_forgery https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html