csrf

Documentation

Index

• Variables
• func GenerateToken() string
• func Mask(sessionToken string) string
• func Unmask(token string) (string, error)

Variables

var DoubleEncodedTokenSize = 32

var EncodedTokenSize = 24

var ErrInvalidLength = errors.New("invalid length")

var TokenSize = 18

Functions

func GenerateToken

func GenerateToken() string

GenerateToken generates a new random token that can be used as a CSRF token. Ideally, a unique token for each session should be generated. On can use the masking technique to generate a unique token for each request, that can still be verified against a session-unique token.

func Mask

func Mask(sessionToken string) string

Mask can be used to mask a session-wide token into a unique CSRF token for each request.

func Unmask

func Unmask(token string) (string, error)

Unmask extracts a potential session-wide token from a masked CSRF token. It returns an error if the token is not of the correct length or if it contains illegal base64 characters.