Struct CsrfMiddleware 

pub struct CsrfMiddleware { /* private fields */ }

CSRF protection middleware.

Implements protection against Cross-Site Request Forgery attacks using the double-submit cookie pattern by default.

How It Works

1. For safe methods (GET, HEAD, OPTIONS, TRACE): generates a CSRF token and sets it in a cookie if not present.
2. For state-changing methods (POST, PUT, DELETE, PATCH): validates that the token in the header matches the token in the cookie.

Example

use fastapi_core::middleware::{CsrfMiddleware, CsrfConfig};

let mut stack = MiddlewareStack::new();
stack.push(CsrfMiddleware::new());

// Or with custom configuration:
let csrf = CsrfMiddleware::with_config(
    CsrfConfig::new()
        .header_name("X-XSRF-Token")
        .cookie_name("XSRF-TOKEN")
        .production(false)
);
stack.push(csrf);

Implementations

impl CsrfMiddleware

pub fn new() -> Self

Creates a new CSRF middleware with default configuration.

pub fn with_config(config: CsrfConfig) -> Self

Creates a new CSRF middleware with the given configuration.

Trait Implementations

impl Clone for CsrfMiddleware

fn clone(&self) -> CsrfMiddleware

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CsrfMiddleware

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CsrfMiddleware

fn default() -> Self

Returns the “default value” for a type.

impl Middleware for CsrfMiddleware

fn before<'a>( &'a self, _ctx: &'a RequestContext, req: &'a mut Request, ) -> BoxFuture<'a, ControlFlow>

Called before the handler executes.

fn after<'a>( &'a self, _ctx: &'a RequestContext, req: &'a Request, response: Response, ) -> BoxFuture<'a, Response>

Called after the handler executes.

fn name(&self) -> &'static str

Returns the middleware name for debugging and logging.