# I can't get my CSRF token to send

**URL:** <https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674>\
**Category:** Uppy\
**Created:** [March 1, 2018, 5:31pm UTC](https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674 "2018-03-01T17:31:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mrchimp](https://yyz2.discourse-cdn.com/flex032/user_avatar/community.transloadit.com/mrchimp/32/55_2.png) [@mrchimp](https://community.transloadit.com/u/mrchimp)\
**Post date:** [March 1, 2018, 5:31pm UTC](https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674/1 "2018-03-01T17:31:11Z")

</div>

I’ve tried both of the methods below but I don’t see any parameters being sent with the XHR requests when I add a file.

```
const uppy = new Uppy({
  meta: {_token: this._token},
});

uppy.setMeta({
    _token: this._token,
});

```

Am i missing something?

---

<div class="post-metadata">

**Author:** ![goto-bus-stop](https://yyz2.discourse-cdn.com/flex032/user_avatar/community.transloadit.com/goto-bus-stop/32/18_2.png) [@goto-bus-stop](https://community.transloadit.com/u/goto-bus-stop)\
**Post date:** [March 15, 2018, 3:12pm UTC](https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674/2 "2018-03-15T15:12:33Z")

</div>

Hi, apologies for the wait. Are you using the `bundle: true` option for `XHRUpload`? At the moment, XHRUpload only sends metadata for uploads that do not use the `bundle` option. There is an issue about it here: [https://github.com/transloadit/uppy/issues/646](https://github.com/transloadit/uppy/issues/646)

---

<div class="post-metadata">

**Author:** ![mrchimp](https://yyz2.discourse-cdn.com/flex032/user_avatar/community.transloadit.com/mrchimp/32/55_2.png) [@mrchimp](https://community.transloadit.com/u/mrchimp)\
**Post date:** [March 15, 2018, 4:19pm UTC](https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674/3 "2018-03-15T16:19:02Z")

</div>

Hi thanks for getting back to me and thanks for the link.

When I stopped using the TUS plugin the metafields started to work. That’s about all I know so far.

I’ve actually halted work on this project for other reasons. I will get back to it at some point and will report back here if I have any useful info.

---

<div class="post-metadata">

**Author:** ![goto-bus-stop](https://yyz2.discourse-cdn.com/flex032/user_avatar/community.transloadit.com/goto-bus-stop/32/18_2.png) [@goto-bus-stop](https://community.transloadit.com/u/goto-bus-stop)\
**Post date:** [March 19, 2018, 9:59am UTC](https://community.transloadit.com/t/i-cant-get-my-csrf-token-to-send/14674/4 "2018-03-19T09:59:18Z")

</div>

Oh; with the Tus plugin metadata works a little differently. Tus uploads send base64 encoded metadata inside an `Upload-Metadata` header.