rocket_csrf 0.3.0

CSRF (Cross-Site Request Forgery) protection for Rocket web framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

#![feature(decl_macro)]

#[macro_use] extern crate rocket;

const COOKIE_NAME: &str = "foobar";
const COOKIE_LEN: usize = 64;

fn client() -> rocket::local::Client {
    rocket::local::Client::new(rocket()).unwrap()
}

fn rocket() -> rocket::Rocket {
    rocket::ignite()
        .attach(rocket_csrf::Fairing::new(
            rocket_csrf::CsrfConfig::default()
                .with_cookie_name(COOKIE_NAME)
                .with_cookie_len(COOKIE_LEN)
                .with_lifetime(time::Duration::days(3))
        ))
        .mount("/", routes![index])
}

#[get("/")]
fn index() {
}

#[test]
fn add_csrf_token_to_cookies() {
    base64::decode(client().get("/").dispatch().cookies().iter().find(|cookie| {
        cookie.name() == COOKIE_NAME
    }).unwrap().value()).unwrap();
}