What s the best way to prevent Cross-Site Request Forgery CSRF in a stateless Node js RESTful API that uses JWT for authentication

Question

I’m building a stateless RESTful API in Node.js that uses JSON Web Tokens (JWT) for authentication, but I’m concerned about CSRF attacks. Since the API is stateless, it doesn’t rely on sessions, and I’m wondering if that impacts CSRF vulnerability.

What’s the recommended approach to prevent CSRF in this type of setup? Are there specific techniques or middleware I should consider when working with JWTs to enhance security against CSRF?