diff --git a/api/index.ts b/api/index.ts
index 14bc2a6..79c589a 100644
--- a/api/index.ts
+++ b/api/index.ts
@@ -24,6 +24,7 @@ if (isDev) {
     app.use(httpBodyLimiter)
     app.use(apiLimiter)
     app.use(cookieParser());
+    app.get('/csrf-token', generateTokenHandler)
     app.post('/auth/login', loginHandler)
     app.post('/auth/logout', logoutHandler)
     app.use('/api', jwtMiddleware, apiRouter)