fiber/middleware/csrf/config.go

package csrf

import (
	"fmt"
	"time"

	"github.com/gofiber/fiber/v2"
	"github.com/gofiber/fiber/v2/internal/storage/memory"
	"github.com/gofiber/fiber/v2/utils"
)

// Config defines the config for middleware.
type Config struct {
	// Next defines a function to skip this middleware when returned true.
	//
	// Optional. Default: nil
	Next func(c *fiber.Ctx) bool

	// TokenLookup is a string in the form of "<source>:<key>" that is used
	// to extract token from the request.
	//
	// Optional. Default value "header:X-CSRF-Token".
	// Possible values:
	// - "header:<name>"
	// - "query:<name>"
	// - "param:<name>"
	// - "form:<name>"
	// - "cookie:<name>"
	TokenLookup string

	// Cookie
	//
	// Optional.
	Cookie *fiber.Cookie

	// Expiration is the duration before csrf token will expire
	//
	// Optional. Default: 1 * time.Hour
	Expiration time.Duration

	// Store is used to store the state of the middleware
	//
	// Optional. Default: memory.New()
	Storage fiber.Storage

	// Context key to store generated CSRF token into context.
	//
	// Optional. Default value "csrf".
	ContextKey string

	// Optional. ID generator function.
	//
	// Default: utils.UUID
	Generator func() string

	// Deprecated, please use Expiration
	CookieExpires time.Duration
}

// ConfigDefault is the default config
var ConfigDefault = Config{
	Next:        nil,
	TokenLookup: "header:X-CSRF-Token",
	ContextKey:  "csrf",
	Cookie: &fiber.Cookie{
		Name:     "_csrf",
		SameSite: "Strict",
	},
	Expiration: 1 * time.Hour,
	Storage:    memory.New(),
	Generator:  utils.UUID,
}

// Helper function to set default values
func configDefault(config ...Config) Config {
	// Return default config if nothing provided
	if len(config) < 1 {
		return ConfigDefault
	}

	// Override default config
	cfg := config[0]

	// Set default values
	if cfg.TokenLookup == "" {
		cfg.TokenLookup = ConfigDefault.TokenLookup
	}
	if cfg.ContextKey == "" {
		cfg.ContextKey = ConfigDefault.ContextKey
	}
	if cfg.CookieExpires != 0 {
		fmt.Println("[CSRF] CookieExpires is deprecated, please use Expiration")
		cfg.CookieExpires = ConfigDefault.Expiration
	}
	if cfg.Expiration == 0 {
		cfg.Expiration = ConfigDefault.Expiration
	}
	if cfg.Cookie != nil {
		if cfg.Cookie.Name == "" {
			cfg.Cookie.Name = ConfigDefault.Cookie.Name
		}
		if cfg.Cookie.SameSite == "" {
			cfg.Cookie.SameSite = ConfigDefault.Cookie.SameSite
		}
	} else {
		cfg.Cookie = ConfigDefault.Cookie
	}
	if cfg.Generator == nil {
		cfg.Generator = ConfigDefault.Generator
	}

	return cfg
}