\Pydio\Core\Http\MiddlewareSecureTokenMiddleware

Class SecureTokenMiddleware CSRF Prevention

Summary

Methods
Properties
Constants
handleRequest()
generateSecureToken()
checkSecureToken()
No public properties found
SECURE_TOKENS_KEY
hasSecureToken()
No protected properties found
N/A
No private methods found
No private properties found
N/A

Constants

SECURE_TOKENS_KEY

SECURE_TOKENS_KEY

Methods

handleRequest()

handleRequest(\Psr\Http\Message\ServerRequestInterface  $requestInterface, \Psr\Http\Message\ResponseInterface  $responseInterface, callable|null  $next = null) : \Psr\Http\Message\ResponseInterface

Parameters

\Psr\Http\Message\ServerRequestInterface $requestInterface
\Psr\Http\Message\ResponseInterface $responseInterface
callable|null $next

Throws

\Pydio\Core\Exception\PydioException

Returns

\Psr\Http\Message\ResponseInterface

generateSecureToken()

generateSecureToken() : string

Put a secure token in the session

Returns

string

checkSecureToken()

checkSecureToken(string  $token) : boolean

Verify a secure token value from the session

Parameters

string $token

Returns

boolean

hasSecureToken()

hasSecureToken() : string|boolean

Get the secure token from the session

Returns

string|boolean