CSRF regenerate with AJAX

Hello,

Maybe I didn't understand this question, but I wanted to talk about a problem I had before and its solution. When I tried to send an AJAX request using Codeigniter, I was getting 403 Forbidden Error because the csrf token was not renewed after the 1st request, then I produced the following solution, I got some code from you, you can use it if it works for you.

For using AJAX requests on Codeigniter 4, if you are using CSRF TOKEN for security, you just need refresh CSRF TOKEN for post replies.

You can add this function in your any helper class.

Code:

if (! function_exists('zs_refreshcsrf')) {
    function zs_refreshcsrf(){
        echo '
            <script>
                function update_csrf_fields() {
                    let all_forms = document.forms;
                    for(e of all_forms) {
                        var data = e.querySelector(\'input[name='.csrf_token().']\');
                        if(data) {
                            data.value = \''.csrf_hash().'\';
                        }
                    }
                }
               
                update_csrf_fields();
            </script>';
    }
}

Warning message function with bootstrap, i using this and you can use in any helper this code : 

Code:

if (! function_exists('zs_alertboost')) {
    function zs_alertboost($type, $msg){
        $allowed_types = array("primary","secondary","success","danger","warning","info","light","dark");

        if (in_array($type, $allowed_types)) {
            echo '<div class="alert alert-'.$type.'" role="alert"> '.$msg.' </div>';
        }else{
            echo '<div class="alert alert-warning" role="alert"> '.$msg.' </div>';
        }
    }
}

When users get any error from the controller, or the controller when returned with some data`s, if you not update csrf token you can get 403 Forbidden error.

You just need use this function in the controller before alerting to the user.

Code:

            if (! $this->validateData($post, $validation_rules)) {
                zs_refreshcsrf();
                return zs_alertboost("warning", validation_list_errors());
            }

Do not use token refresh code in your view page directly, because you can get error, you can use token refresh code only controller, because hash value can change every post request.