Allow csrfToken to be set via a prop.

components/x-teaser-list/readme.md

@@ -33,9 +33,10 @@ All `x-` components are designed to be compatible with a variety of runtimes, no
 
 [jsx-wtf]: https://jasonformat.com/wtf-is-jsx/
 
-### Properties
+### Props
 
 Feature           | Type    | Notes
 ------------------|---------|----------------------------
 `items`           | Array   | Array of objects representing content items in Teaser format.
 `showSaveButtons` | Boolean | Default = true. Whether to show the save buttons.
+`csrfToken`       | String  | Cross-site Request Forgery token. Required if save buttons are shown.

components/x-teaser-list/src/TeaserList.jsx

@@ -4,7 +4,7 @@ import { Teaser, presets } from '@financial-times/x-teaser';
 import classNames from 'classnames';
 import styles from './TeaserList.scss';
 
-const TeaserList = ({ items = [], showSaveButtons = true }) => (
+const TeaserList = ({ items = [], showSaveButtons = true, csrfToken = null }) => (
 	<ul className={classNames(styles.list)}>
 	{items.map(item => {
 		return (
@@ -24,7 +24,7 @@ const TeaserList = ({ items = [], showSaveButtons = true }) => (
 						id={`${item.id}-save-button`}
 						contentId={item.id}
 						contentTitle={item.title}
-						csrfToken="dummy-token"
+						csrfToken={csrfToken}
 						saved={item.saved || false}
 					/>
 				</div>}

components/x-teaser-list/stories/with-save-buttons.js

@@ -1,7 +1,8 @@
 exports.title = 'With save buttons';
 
 exports.data = {
-	items: require('./content-items.json')
+	items: require('./content-items.json'),
+	csrfToken: 'dummy-token'
 };
 
 // This reference is only required for hot module loading in development