Put auth-token on all jQuery Ajax Requests

jquery-auth-token.js

$(function(){
  var tokenValue = $("meta[name='csrf-token']").attr('content');

  $.ajaxSetup({
    headers: {'X-CSRF-Token': tokenValue}
  });
})

FWIW, $.ajaxSetup is pretty frowned-upon by the docs: http://api.jquery.com/jQuery.ajaxSetup

The settings specified here will affect all calls to $.ajax or AJAX-based derivatives such as $.get(). This can cause undesirable behavior since other callers (for example, plugins) may be expecting the normal default settings. For that reason we strongly recommend against using this API. Instead, set the options explicitly in the call or define a simple plugin to do so.

@pje: Nevertheless, in this case, I'd think adding a custom X- HTTP header is a pretty safe thing to do, it's not like you're changing the default url or data or something.

Thanks for this – just one small note: I think the header needs to be X-CSRFToken not X-CSRF-Token according to this thread – didn't work for me until I changed that.

@ses4j: I think that would be undesirable to expose the authorization header on a $.get to a third part resource (for example images)

This might be of your interest. This code extends jQuery Ajax to include token to the defined ajax requests types that was previously get from your server.

I successfully use that code in many projects

the url is here: https://github.com/marcinkrysiak1979/jquery-ajax-addToken