Skip to main content

Module csrf

Module csrf 

Source
Expand description

Actix request/cookie adapter for the shared CSRF core.

Re-exports§

pub use crate::shared::csrf::CSRF_HEADER;
pub use crate::shared::csrf::CsrfError;
pub use crate::shared::csrf::CsrfErrorKind;
pub use crate::shared::csrf::RequestSourceMode;
pub use crate::shared::csrf::Result;
pub use crate::shared::csrf::build_csrf_token;
pub use crate::shared::csrf::ensure_headers_allowed;

Structs§

CsrfTokenNames
CSRF names adapted to Actix’s HTTP 0.2 header type. Validation remains in the shared core.

Functions§

default_csrf_token_names
Immutable default names adapted to Actix’s header type.
ensure_double_submit_token
Ensures an Actix request contains matching CSRF cookie and header values.
ensure_double_submit_token_with_names
Ensures an Actix request contains matching CSRF cookie and header values using custom names.
ensure_request_source_allowed
Validates source headers for an Actix request.
ensure_service_double_submit_token
Ensures an Actix service request contains matching CSRF cookie and header values.
ensure_service_double_submit_token_with_names
Ensures an Actix service request contains matching CSRF cookie and header values using custom names.
ensure_service_request_source_allowed
Validates source headers for an Actix service request.
is_unsafe_method
Whether an Actix method needs CSRF protection.