[Fixed]-Rest-auth still reports the error of "CSRF cookie not set", but I've set the csrf

Thanks to Raphael Gomes. I made some progress on this.
I changed my server.js file as:

const cookieParser = require('cookie-parser');
const csrf = require('csurf');
app.use(cookieParser());
app.use(csrf({ cookie: true }));
app.use(function (req, res, next) {
  res.cookie('csrfmiddlewaretoken', req.csrfToken());
  next();
});

And in the Fiddler,

I can see 2 csrfs there, one default and one set by me. I tried to remove app.use(csrf({ cookie: true })); but then it shows csrf misconfigued. Anyway, at least csrfmiddlewaretoken works in this way.

Then the authentication result is like:

It says this csrf token is not valid. I think that’s because I used the req.csrfToken(). I am still researching that how to set the correct csrf token.