nuxt-csurf playground

Fetched on load — GET /api/data

Fetched on demand (immediate: false + execute()) — GET /api/data

2. Imperative — $csrfFetch / $fetch

Use these inside event handlers, watchers, or anywhere after mount.

methodsToProtect: ['POST']

routeRules: { '/api/nocsrf': { csurf: false } }