Struct CsrfProtection 

pub struct CsrfProtection { /* private fields */ }

CSRF protection middleware.

Spring Security Equivalent

Similar to CsrfFilter in Spring Security.

Behavior

1. For safe methods (GET, HEAD, OPTIONS, TRACE): Generate and store token
2. For state-changing methods (POST, PUT, DELETE, PATCH): Validate token
3. Token is available in request extensions as CsrfToken

Example

use actix_security_core::http::security::csrf::{CsrfProtection, CsrfConfig};

App::new()
    .wrap(CsrfProtection::new(CsrfConfig::default()))

Implementations

impl CsrfProtection

pub fn new(config: CsrfConfig) -> CsrfProtection

Create new CSRF protection with the given configuration.

pub fn default_config() -> CsrfProtection

Create with default configuration.

Trait Implementations

impl Clone for CsrfProtection

fn clone(&self) -> CsrfProtection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S, B> Transform<S, ServiceRequest> for CsrfProtection

where S: Service<ServiceRequest, Response = ServiceResponse<B>, Error = Error> + 'static, <S as Service<ServiceRequest>>::Future: 'static, B: 'static,

type Response = ServiceResponse<EitherBody<B>>

Responses produced by the service.

type Error = Error

Errors produced by the service.

type Transform = CsrfMiddleware<S>

The TransformService value created by this factory

type InitError = ()

Errors produced while building a transform service.

type Future = Ready<Result<<CsrfProtection as Transform<S, ServiceRequest>>::Transform, <CsrfProtection as Transform<S, ServiceRequest>>::InitError>>

The future response value.

fn new_transform( &self, service: S, ) -> <CsrfProtection as Transform<S, ServiceRequest>>::Future

Creates and returns a new Transform component, asynchronously