Struct CsrfDoubleSubmitCookie 

pub struct CsrfDoubleSubmitCookie {
    pub http_only: bool,
    pub secure: bool,
    pub same_site: SameSite,
}

Cookie flags for tokens when using the Double-Submit Cookie pattern.

• http_only: Must be false so client code can read the token and mirror it into a header or form field.
• secure: Should be true in production to restrict cookies to HTTPS.
• same_site: Choose Strict or Lax depending on your cross-site needs.

Examples

use actix_csrf_middleware::{CsrfMiddlewareConfig, CsrfDoubleSubmitCookie};
use actix_web::cookie::SameSite;

let secret = b"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
let cfg = CsrfMiddlewareConfig::double_submit_cookie(secret)
    .with_token_cookie_config(CsrfDoubleSubmitCookie {
        http_only: false,
        secure: true,
        same_site: SameSite::Strict,
    });

Fields

http_only: bool

If true, JavaScript cannot read the cookie

secure: bool

Restrict cookies to HTTPS in production

same_site: SameSite

SameSite policy controlling cross-site cookie sending

Trait Implementations

impl Clone for CsrfDoubleSubmitCookie

fn clone(&self) -> CsrfDoubleSubmitCookie

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.