Struct CsrfConfig 

#[non_exhaustive]
pub struct CsrfConfig {
    pub cookie_name: String,
    pub header_name: String,
    pub field_name: String,
    pub ttl_secs: u64,
    pub exempt_methods: Vec<String>,
}

Configuration for CSRF protection middleware.

Uses the double-submit cookie pattern: a signed HttpOnly cookie holds the token, and the client must echo the same token back via the configured header on state-changing requests.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

cookie_name: String

Name of the CSRF cookie.

header_name: String

Name of the HTTP header that must carry the CSRF token on unsafe requests.

field_name: String

Intended form-field name for the CSRF token. Not currently read by the middleware — token validation is header-only. Retained for configuration compatibility.

ttl_secs: u64

Cookie time-to-live in seconds.

exempt_methods: Vec<String>

HTTP methods exempt from CSRF validation.

Trait Implementations

impl Clone for CsrfConfig

fn clone(&self) -> CsrfConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CsrfConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CsrfConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CsrfConfig

where CsrfConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.