form.js

<script>
  import { onMount } from 'svelte';
  import axios from 'axios';

  let csrfToken = '';

  onMount(async () => {
    try {
      const response = await axios.get('/api/get-csrf-token');
      csrfToken = response.data.csrfToken;
    } catch (error) {
      console.error('Error fetching CSRF token:', error);
    }
  });

  async function submitForm() {
    const formData = new FormData();
    formData.append('_csrf', csrfToken);
    // Append other form data here

    try {
      const response = await axios.post('/api/submit-form', formData);
      // Handle success
    } catch (error) {
      // Handle error
    }
  }
</script>

<form on:submit|preventDefault={submitForm}>
  <input type="hidden" name="_csrf" bind:value={csrfToken} />
  <!-- Your form fields go here -->
  <button type="submit">Submit</button>
</form>