Module csrf 

CSRF tokens, source validation and typed errors. Framework-neutral CSRF token and request-source validation.

Structs

CsrfError

Error returned by CSRF helper functions.

CsrfTokenNames

Cookie and header names used by the double-submit token check.

Enums

CsrfErrorKind

Product-neutral CSRF failure category.

RequestSourceMode

Whether source headers are required or only validated when present.

Constants

CSRF_COOKIE

Default CSRF cookie name used by compatibility helpers.

CSRF_HEADER

Default CSRF request header name used by compatibility helpers.

Functions

build_csrf_token

Builds a URL-safe random CSRF token.

default_csrf_token_names

Returns the shared default CSRF token names.

ensure_headers_allowed

Validates raw source header values against the request and public-site origins.

ensure_token_values

Compares decoded double-submit values in constant time for equal-length tokens.

is_unsafe_method

Returns whether method can mutate state and should be protected by CSRF checks.

request_origin

Builds a bounded, normalized origin from product-trusted scheme and host values.

Type Aliases

Result

Result type returned by CSRF helper functions.