Struct tower_surf::Token

pub struct Token { /* private fields */ }

An extension providing a way to interact with a visitor’s CSRF token.

Implementations

impl Token

pub fn set(&self, identifier: impl Into<String>) -> Result<(), Error>

Updates the identifier used to sign the token. The value should only be valid for the duration of the user’s authenticated session and should be unique to that session.

See: OWASP’s CSRF Prevention Cheat Sheet.

Errors

• Error::InvalidLength

pub fn get(&self) -> Result<String, Error>

Get the current visitor’s token.

Errors

• Error::NoCookie

pub fn reset(&self)

Reset the token to an identifier generated by Surf.

Trait Implementations

impl Clone for Token

fn clone(&self) -> Token

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S> FromRequestParts<S> for Token

where S: Send + Sync,

type Rejection = (StatusCode, String)

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

fn from_request_parts<'life0, 'life1, 'async_trait>( parts: &'life0 mut Parts, _: &'life1 S, ) -> Pin<Box<dyn Future<Output = Result<Self, Self::Rejection>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Perform the extraction.