Commit Graph

113 Commits (25e399213c11d23783ea583340f1282e5b27db86)

Author SHA1 Message Date
Abhishek Mehandiratta 68fcd8c88f
Feature: Session Only Cookies (#1752)
* feat(ctx): add SessionOnly property on Cookie struct

* feat(middleware/config): add CookieSessionOnly property on middleware Config struct

* feat(csrf): link config CookieSessionOnly with fiber.Cookie in create middleware function

* fix(ctx_test): add tests for SessionOnly cookie in test_ctx_cookie

* fix(readme): update readme in csrf middleware for CookieSessionOnly property

* remove deprecated property from CookieSessionOnly explaination comments
2022-02-07 13:35:00 +01:00
Jason McNeil 59e4bf6cc5
🔧 fix(middleware/csrf): unmatched token returns nil error (#1667)
* Update csrf.go

* Update csrf_test.go

* fix(middleware/csrf): missing token return and unit test

* Update csrf_test.go
2021-12-29 02:13:20 +01:00
Jason McNeil af6b204e50
CookieSameSite default "Lax" (#1640) 2021-12-02 07:41:44 +01:00
Gusted 7b7dcf29f7
♻️ Tidy up the codebase (#1613)
* run gofmt

* add t.Helper()

* Simplify assigns

* Simplify make operation

* Remove unused field in struct

* Fix typo

* Run gofumpt ./

* Consistent spacing

* len(...) can never be negative

* Use ReplaceAll

* Simplify operation

* Remove deadcode

* Fix typo

* Tidy up `} else { if ...`

* Fix AssertEqual

* Remove t.Helper() to fix go1.14.15
2021-11-05 08:00:03 +01:00
Nik Schaefer a6868c24b9
📚 Doc: Correct Session to Crsf in Import (#1277) 2021-04-10 16:19:40 -04:00
iRedMail 078b6e295a
Fix comment in middleware/csrf/config.go 2021-03-20 12:58:08 +08:00
Joey 0f18e0f1b0
Merge pull request #1194 from gofiber/csrf-mw-restructuring
CSRF MW Restructuring
2021-03-09 15:32:16 +01:00
hi019 13f0d5bb61 Remove global variable 2021-03-09 09:29:47 -05:00
hi019 983919fd18
CSRF Docs - Add note about how to get token (#1196) 2021-03-01 20:32:22 -05:00
hi019 b31953ab8d Revert "Remove global variable"
This reverts commit 2d4d2f7c
2021-03-01 16:38:56 -05:00
hi019 2d4d2f7c47 Remove global variable 2021-03-01 16:30:04 -05:00
hi019 86e43593cd CSRF MW Restructuring 2021-03-01 16:25:32 -05:00
Jason McNeil 53e5dc523e
🩹 Fix: CSRF middleware cookie<>storage bug squashed and other improvements (#1180)
* expire cookie on Post, Delete, Patch and Put

Cookie should always expire on Post, Delete, Patch and Put as it is either valid and will be removed from storage, or is not in storage and invalid

* token and cookie match

* retrigger checks

* csrf tests

* csrf per session strategy
2021-03-01 17:44:17 +01:00
hinoguma 1ad5a618cb make default handler to private. fix testcase for invalid token and empty token. 2021-01-23 12:39:27 +09:00
hinoguma 19e6a4429d add custom error func for csrf middleware 2021-01-23 03:45:47 +09:00
hi019 494474aebd
Merge branch 'master' into master 2020-12-13 22:08:51 -05:00
amalshaji 86f258c4ae fixed cookie error in csrf.go 2020-12-10 10:45:21 +05:30
Fenny 323d9d89cc 🩹 fix manager logic 2020-11-23 07:38:42 +01:00
hi019 bc7b240158 improve mw 2020-11-21 12:36:16 -05:00
hi019 e828c17554 Standardize MW docs 2020-11-17 12:12:49 -05:00
Fenny 9be8eedcc6 🩹 fix cache mw
Co-Authored-By: RW <7063188+ReneWerner87@users.noreply.github.com>
2020-11-17 13:03:18 +01:00
Fenny 6338ce855c 🩹 fix csrf test 2020-11-14 03:09:53 +01:00
Fenny 9a0551049c 📝 update readme 2020-11-14 00:47:31 +01:00
Fenny 6b48509ce9 update cookie config fields 2020-11-14 00:45:55 +01:00
Fenny 558d802cdd 🩹 Fix expiration check 2020-11-13 18:34:01 +01:00
Fenny ef35d00a79 🦺 simplify session config 2020-11-11 23:51:32 +01:00
Fenny ec8fdb32de 🧽 clean code structure 2020-11-11 21:44:37 +01:00
Fenny b29d500fc0 🩹 verify csrf on state changing methods 2020-11-11 21:39:22 +01:00
Fenny ce897c0b66 🩹 fix tests 2020-11-11 18:34:46 +01:00
Fenny 66ee4de7d8 🕊 rename token to key 2020-11-11 18:19:53 +01:00
Fenny 1bd7b1b15b ✏ fix typo 2020-11-11 16:41:26 +01:00
Fenny 2b0f65c5d2 ✏ update readme 2020-11-11 15:57:38 +01:00
Fenny 2a541b021c ✏ update csrf readme 2020-11-11 15:33:19 +01:00
Fenny 053dfd383d 🩹 fix crsf middleware 2020-11-11 15:25:35 +01:00
Fenny 8bd50de610 🧹 housekeeping 2020-11-11 13:54:27 +01:00
kiyon d8e763e366 🩹 Keep csrf token per session 2020-10-27 12:15:51 +08:00
kiyon 5ea5bbfd44 👷 Improve csrf middleware
- Skip non GET/POST http method
- Delete token if matched
- Use cfg.Expiration instead of cfg.CookieExpires
2020-10-24 10:19:40 +08:00
Joey B b1d19f4a21
Merge pull request #958 from Fenny/master
🩹 add memory storage for csrf
2020-10-23 16:01:28 -07:00
Fenny 9f2c0691b0 🩹 fix test cases 2020-10-24 01:00:09 +02:00
Fenny 3f7b80e9a6 ✏ fix typo 2020-10-24 00:19:38 +02:00
Fenny d3cf0e55e7 🩹 add memory storage for csrf 2020-10-24 00:18:25 +02:00
hi019 25db10b220 📝Correct CSRF comment 2020-10-23 17:20:25 -04:00
hi019 1fe6d3b25d Use default values for cookie fields 2020-10-03 10:52:06 -04:00
hi019 4898778e28 🐛 Move cookie expires outside of if 2020-10-03 10:50:29 -04:00
hi019 867f2fc0a8 🐛 Fix passing partial cookie to csrf.New 2020-10-03 10:41:14 -04:00
Fenny 4ed6fff7b3 🍪 fix typo 2020-09-30 15:55:21 +02:00
Fenny ba3d08ef6d 🍪 csrf default to Strict if left empty in config 2020-09-30 15:55:01 +02:00
Fenny d6f717148a 🛠 correct convert naming 2020-09-27 12:22:17 +02:00
Fenny 446e7d595e ✏ format examples 2020-09-25 00:44:46 +02:00
Fenny 9d10f0e5b6 📦 set csrf same-site to strict 2020-09-25 00:42:51 +02:00
Fenny b94f238b83 🍪 default cookie name 2020-09-24 21:12:52 +02:00
Fenny c2554d7969 🍪 allow SameSite option 2020-09-24 21:08:10 +02:00
kiyon 616ff8f532 👷 remove unnecessary fiber app config 2020-09-17 13:41:06 +08:00
Fenny ebe107d54f 📘 add csrf readme 2020-09-16 15:36:33 +02:00
Fenny c993d8db2e 🩹 csrf expires should be time.Duration
Co-Authored-By: kiyon <kiyon@gofiber.io>
2020-09-16 12:48:29 +02:00
Fenny c8bb389ba6 🎈 fix csrf expiration type 2020-09-16 12:47:29 +02:00
kiyon 0ad36c7526 👷 improve csrf mw test cases
Co-authored-by: Rene rene@gofiber.io
2020-09-16 15:17:17 +08:00
kiyon 3cedf2dc3e 👷 improve csrf mw test cases 2020-09-16 11:15:10 +08:00
kiyon e13411e184 👷 improve mw test cases
add Next test case
2020-09-16 09:44:05 +08:00
Fenny 2768ea2a77 🙌 make utils public
Co-Authored-By: RW <7063188+ReneWerner87@users.noreply.github.com>
2020-09-14 12:12:29 +02:00
Fenny a3cac71ae8 🔦 move utils to internal 2020-09-14 09:09:06 +02:00
Fenny b8cb100e28 v2 2020-09-14 05:47:17 +02:00
Fenny ec5d66e7a8 v2 2020-09-13 11:20:11 +02:00