All I find is nodebb-plugin-write-api which is not enough. It doesn't even have login API.I am not familiar with nodejs.And it is not necessary to handle the problems only existing on browser like CSRF.