csrf

Documentation

Index

• Constants
• func AddCSRFProtection(w http.ResponseWriter, r *http.Request) (string, error)
• func VerifyToken(w http.ResponseWriter, r *http.Request) error

Constants

const (
	// CookieName is a name of the cookie
	CookieName = "grv_csrf"
	// HeaderName is the default HTTP request header to inspect
	HeaderName = "X-CSRF-Token"
)

Functions

func AddCSRFProtection

func AddCSRFProtection(w http.ResponseWriter, r *http.Request) (string, error)

AddCSRFProtection adds CSRF token into the user session via secure cookie, it implements "double submit cookie" approach to check against CSRF attacks https://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet#Double_Submit_Cookie

func VerifyToken

func VerifyToken(w http.ResponseWriter, r *http.Request) error

VerifyToken checks if the cookie value and request value match.