leonklingele
ac4ce21d9c
🐛 Bug: Fix issues introduced in linting PR ( #2319 )
...
* internal: revert linting changes
Changes to the internal package should not have been made in 167a8b5e94
.
* middleware/monitor: revert changes to exported field "ChartJSURL"
This is a breaking change introduced in 167a8b5e94
.
* middleware/monitor: fix error checking
Fix the errorenous error checking introduced in 167a8b5e94
.
* 🐛 Bug: Fix issues introduced in linting PR #2319
* 🐛 Bug: Fix issues introduced in linting PR #2319
* Bug: Fix issues introduced in linting PR #2319
---------
Co-authored-by: René Werner <rene@gofiber.io>
2023-02-02 15:57:40 +01:00
leonklingele
167a8b5e94
🚀 Feature: Add and apply more stricter golangci-lint linting rules ( #2286 )
...
* golangci-lint: add and apply more stricter linting rules
* github: drop security workflow now that we use gosec linter inside golangci-lint
* github: use official golangci-lint CI linter
* Add editorconfig and gitattributes file
2023-01-27 09:01:37 +01:00
M. Efe Çetin
5406560033
🧹 chore: make most tests parallel ( #2299 )
...
* 🧹 chore: make most tests parallel
* revert some tests
* revert some tests
* revert some tests
2023-01-15 23:21:37 +08:00
RW
ec96d161a0
Fix csrf middleware behavior with header key lookup ( #2063 )
...
* 🐛 [Bug]: Strange CSRF middleware behavior with header KeyLookup configuration #2045
2022-08-30 14:48:31 +02:00
Jason McNeil
6272d759eb
🚀 [Feature]: middleware/csrf custom extractor ( #2052 )
...
* feat(middleware/csrf): allow custom Extractor
* test: update Test_CSRF_From_Custom
* docs: add comma
* docs: update KeyLookup docs
2022-08-28 18:57:47 +02:00
Abhishek Mehandiratta
68fcd8c88f
Feature: Session Only Cookies ( #1752 )
...
* feat(ctx): add SessionOnly property on Cookie struct
* feat(middleware/config): add CookieSessionOnly property on middleware Config struct
* feat(csrf): link config CookieSessionOnly with fiber.Cookie in create middleware function
* fix(ctx_test): add tests for SessionOnly cookie in test_ctx_cookie
* fix(readme): update readme in csrf middleware for CookieSessionOnly property
* remove deprecated property from CookieSessionOnly explaination comments
2022-02-07 13:35:00 +01:00
Jason McNeil
59e4bf6cc5
🔧 fix(middleware/csrf): unmatched token returns nil error ( #1667 )
...
* Update csrf.go
* Update csrf_test.go
* fix(middleware/csrf): missing token return and unit test
* Update csrf_test.go
2021-12-29 02:13:20 +01:00
Jason McNeil
af6b204e50
CookieSameSite default "Lax" ( #1640 )
2021-12-02 07:41:44 +01:00
Gusted
7b7dcf29f7
♻️ Tidy up the codebase ( #1613 )
...
* run gofmt
* add t.Helper()
* Simplify assigns
* Simplify make operation
* Remove unused field in struct
* Fix typo
* Run gofumpt ./
* Consistent spacing
* len(...) can never be negative
* Use ReplaceAll
* Simplify operation
* Remove deadcode
* Fix typo
* Tidy up `} else { if ...`
* Fix AssertEqual
* Remove t.Helper() to fix go1.14.15
2021-11-05 08:00:03 +01:00
Nik Schaefer
a6868c24b9
📚 Doc: Correct Session to Crsf in Import ( #1277 )
2021-04-10 16:19:40 -04:00
iRedMail
078b6e295a
Fix comment in middleware/csrf/config.go
2021-03-20 12:58:08 +08:00
Joey
0f18e0f1b0
Merge pull request #1194 from gofiber/csrf-mw-restructuring
...
CSRF MW Restructuring
2021-03-09 15:32:16 +01:00
hi019
13f0d5bb61
Remove global variable
2021-03-09 09:29:47 -05:00
hi019
983919fd18
CSRF Docs - Add note about how to get token ( #1196 )
2021-03-01 20:32:22 -05:00
hi019
b31953ab8d
Revert "Remove global variable"
...
This reverts commit 2d4d2f7c
2021-03-01 16:38:56 -05:00
hi019
2d4d2f7c47
Remove global variable
2021-03-01 16:30:04 -05:00
hi019
86e43593cd
CSRF MW Restructuring
2021-03-01 16:25:32 -05:00
Jason McNeil
53e5dc523e
🩹 Fix: CSRF middleware cookie<>storage bug squashed and other improvements ( #1180 )
...
* expire cookie on Post, Delete, Patch and Put
Cookie should always expire on Post, Delete, Patch and Put as it is either valid and will be removed from storage, or is not in storage and invalid
* token and cookie match
* retrigger checks
* csrf tests
* csrf per session strategy
2021-03-01 17:44:17 +01:00
hinoguma
1ad5a618cb
make default handler to private. fix testcase for invalid token and empty token.
2021-01-23 12:39:27 +09:00
hinoguma
19e6a4429d
add custom error func for csrf middleware
2021-01-23 03:45:47 +09:00
hi019
494474aebd
Merge branch 'master' into master
2020-12-13 22:08:51 -05:00
amalshaji
86f258c4ae
fixed cookie error in csrf.go
2020-12-10 10:45:21 +05:30
Fenny
323d9d89cc
🩹 fix manager logic
2020-11-23 07:38:42 +01:00
hi019
bc7b240158
improve mw
2020-11-21 12:36:16 -05:00
hi019
e828c17554
Standardize MW docs
2020-11-17 12:12:49 -05:00
Fenny
9be8eedcc6
🩹 fix cache mw
...
Co-Authored-By: RW <7063188+ReneWerner87@users.noreply.github.com>
2020-11-17 13:03:18 +01:00
Fenny
6338ce855c
🩹 fix csrf test
2020-11-14 03:09:53 +01:00
Fenny
9a0551049c
📝 update readme
2020-11-14 00:47:31 +01:00
Fenny
6b48509ce9
✨ update cookie config fields
2020-11-14 00:45:55 +01:00
Fenny
558d802cdd
🩹 Fix expiration check
2020-11-13 18:34:01 +01:00
Fenny
ef35d00a79
🦺 simplify session config
2020-11-11 23:51:32 +01:00
Fenny
ec8fdb32de
🧽 clean code structure
2020-11-11 21:44:37 +01:00
Fenny
b29d500fc0
🩹 verify csrf on state changing methods
2020-11-11 21:39:22 +01:00
Fenny
ce897c0b66
🩹 fix tests
2020-11-11 18:34:46 +01:00
Fenny
66ee4de7d8
🕊 rename token to key
2020-11-11 18:19:53 +01:00
Fenny
1bd7b1b15b
✏ fix typo
2020-11-11 16:41:26 +01:00
Fenny
2b0f65c5d2
✏ update readme
2020-11-11 15:57:38 +01:00
Fenny
2a541b021c
✏ update csrf readme
2020-11-11 15:33:19 +01:00
Fenny
053dfd383d
🩹 fix crsf middleware
2020-11-11 15:25:35 +01:00
Fenny
8bd50de610
🧹 housekeeping
2020-11-11 13:54:27 +01:00
kiyon
d8e763e366
🩹 Keep csrf token per session
2020-10-27 12:15:51 +08:00
kiyon
5ea5bbfd44
👷 Improve csrf middleware
...
- Skip non GET/POST http method
- Delete token if matched
- Use cfg.Expiration instead of cfg.CookieExpires
2020-10-24 10:19:40 +08:00
Joey B
b1d19f4a21
Merge pull request #958 from Fenny/master
...
🩹 add memory storage for csrf
2020-10-23 16:01:28 -07:00
Fenny
9f2c0691b0
🩹 fix test cases
2020-10-24 01:00:09 +02:00
Fenny
3f7b80e9a6
✏ fix typo
2020-10-24 00:19:38 +02:00
Fenny
d3cf0e55e7
🩹 add memory storage for csrf
2020-10-24 00:18:25 +02:00
hi019
25db10b220
📝 Correct CSRF comment
2020-10-23 17:20:25 -04:00
hi019
1fe6d3b25d
Use default values for cookie fields
2020-10-03 10:52:06 -04:00
hi019
4898778e28
🐛 Move cookie expires outside of if
2020-10-03 10:50:29 -04:00
hi019
867f2fc0a8
🐛 Fix passing partial cookie to csrf.New
2020-10-03 10:41:14 -04:00