Refresh CSRF token after 1 hour

api.py

@bp.route('/csrf/')
@login_required
def get_csrf():
    return csrf.generate_csrf()
  

refresh.js

async function refreshCSRF() {
    const input = document.querySelectorAll('[name=csrf_token]');
    if(input) {
        const response = await fetch('/api/csrf/');
        data = await response.text();
        if(response.ok) {
            csrf_token = data; // csrf_token is a global variable I inject using a <script> tag.
            input.forEach(el => {
                el.value = data;
            });
            console.log('New token ' + data);
        } else {
            console.log('Could not fetch CSRF token: ' + data);
        }
    }
}
let prevent_csrf_expiry = setInterval(refreshCSRF, 1000 * 3600);