Struct CsrfMiddleware 

pub struct CsrfMiddleware { /* private fields */ }

CSRF protection middleware.

Validates Origin / Referer headers on state-changing requests (POST, PUT, DELETE, PATCH) against the configured trusted origins and the service’s own base URL.

Origin checking is delegated to AuthConfig::is_origin_trusted so that all origin-validation logic lives in a single place.

Implementations

impl CsrfMiddleware

pub fn new(config: CsrfConfig, auth_config: Arc<AuthConfig>) -> Self

Create a new CSRF middleware.

Origin trust decisions are delegated to auth_config.

Trait Implementations

impl Middleware for CsrfMiddleware

fn name(&self) -> &'static str

Human-readable name for logging / debugging.

fn before_request<'life0, 'life1, 'async_trait>( &'life0 self, req: &'life1 AuthRequest, ) -> Pin<Box<dyn Future<Output = AuthResult<Option<AuthResponse>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called before the request is dispatched to plugins.

fn after_request<'life0, 'life1, 'async_trait>( &'life0 self, _req: &'life1 AuthRequest, response: AuthResponse, ) -> Pin<Box<dyn Future<Output = AuthResult<AuthResponse>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Called after a response has been produced.