Double-submit CSRF protection. More...

#include <cwist/sys/app/csrf.h>
#include <cwist/net/http/cookie.h>
#include <cwist/core/mem/alloc.h>
#include <errno.h>
#include <fcntl.h>
#include <string.h>
#include <unistd.h>

Include dependency graph for csrf.c:

Go to the source code of this file.

Macros
#define	_POSIX_C_SOURCE 200809L

#define	CWIST_CSRF_COOKIE_NAME "csrf_token"

#define	CWIST_CSRF_TOKEN_BYTES 32

#define	CWIST_CSRF_TOKEN_CHARS (CWIST_CSRF_TOKEN_BYTES * 2)

Functions
cwist_middleware_func	cwist_mw_csrf (cwist_app *app)
	Create the CSRF protection middleware.

const char *	cwist_csrf_token (cwist_http_request *req)
	Get the CSRF token associated with a request.

Detailed Description

Double-submit CSRF protection.

Definition in file csrf.c.

Macro Definition Documentation

◆ _POSIX_C_SOURCE

#define _POSIX_C_SOURCE 200809L

Definition at line 2 of file csrf.c.

◆ CWIST_CSRF_COOKIE_NAME

#define CWIST_CSRF_COOKIE_NAME "csrf_token"

Definition at line 11 of file csrf.c.

◆ CWIST_CSRF_TOKEN_BYTES

#define CWIST_CSRF_TOKEN_BYTES 32

Definition at line 12 of file csrf.c.

◆ CWIST_CSRF_TOKEN_CHARS

#define CWIST_CSRF_TOKEN_CHARS (CWIST_CSRF_TOKEN_BYTES * 2)

Definition at line 13 of file csrf.c.

Function Documentation

◆ cwist_csrf_token()

const char * cwist_csrf_token ( cwist_http_request * req )

Get the CSRF token associated with a request.

Get the CSRF token for the current request.

Parameters

req	Request to query.

Returns: The request's CSRF token, or NULL if req is NULL or no token has been set. The returned pointer is owned by the request.

Definition at line 240 of file csrf.c.

References cap, and cwist_http_request::csrf_token.

◆ cwist_mw_csrf()

cwist_middleware_func cwist_mw_csrf ( cwist_app * app )

Create the CSRF protection middleware.

CSRF middleware factory.