Struct CsrfLayer 

pub struct CsrfLayer { /* private fields */ }

Tower Layer that implements the CSRF double-submit cookie pattern.

Apply with Axum’s .layer() call. Use CsrfLayer::default() for a 403 rejection with the csrf_token cookie and x-csrf-token header, or CsrfLayer::new() to supply a custom CsrfConfig.

[!NOTE] The middleware inspects only the x-csrf-token header and the csrf_token cookie. Safe methods (GET, HEAD, OPTIONS, TRACE) always pass through; a fresh CSRF cookie is set in the response if one is absent.

Examples

use axum::{routing::post, Router};
use rune_axum_csrf::CsrfLayer;

let app: Router = Router::new()
    .route("/submit", post(|| async { "ok" }))
    .layer(CsrfLayer::default());

Implementations

impl CsrfLayer

pub fn new(config: CsrfConfig) -> CsrfLayer

Creates a CsrfLayer from a custom CsrfConfig.

Trait Implementations

impl Clone for CsrfLayer

fn clone(&self) -> CsrfLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CsrfLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for CsrfLayer

fn default() -> CsrfLayer

Returns the “default value” for a type.

impl<S> Layer<S> for CsrfLayer

type Service = CsrfService<S>

The wrapped service

fn layer(&self, inner: S) -> <CsrfLayer as Layer<S>>::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.