Crate actix_csrf_middleware 

Structs

CsrfDoubleSubmitCookie

Cookie flags for tokens when using the Double-Submit Cookie pattern.

CsrfMiddleware

Actix Web middleware providing CSRF protection.

CsrfMiddlewareConfig

Configuration for CsrfMiddleware.

CsrfMiddlewareService

CsrfResponse

CsrfToken

Extractor for the current CSRF token.

Enums

CsrfPattern

CSRF defense patterns supported by CsrfMiddleware.

CsrfTokenValidator

TokenClass

Classification of CSRF tokens by context.

Constants

CSRF_PRE_SESSION_KEY

Name of the pre-session cookie minted by the middleware for unauthenticated flows.

DEFAULT_CSRF_ANON_TOKEN_KEY

Default cookie name for anonymous (pre-session) tokens in the Double-Submit Cookie pattern.

DEFAULT_CSRF_TOKEN_FIELD

Default field name used to extract the CSRF token from request bodies.

DEFAULT_CSRF_TOKEN_HEADER

Default header name that carries the CSRF token.

DEFAULT_CSRF_TOKEN_KEY

Default name of the authorized CSRF token bucket.

DEFAULT_SESSION_ID_KEY

Default name of the session id cookie used to bind tokens and detect authorization state.

Traits

CsrfRequestExt

Extension trait for Actix HttpRequest to rotate the CSRF token in a response.

Functions

eq_tokens

Constant-time equality for token byte slices.

generate_hmac_token_ctx

Generates an HMAC-protected CSRF token bound to a context and identifier.

generate_random_token

Generates a cryptographically secure random CSRF token.

rotate_csrf_token_in_response

Rotates the CSRF token and writes any necessary cookie updates to the response.

validate_hmac_token

Convenience helper to validate an authorized-class CSRF token.

validate_hmac_token_ctx

Verifies an HMAC-protected CSRF token for a given class and identifier.