narasi-ahli
/
narasiahli-be
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: update middleware for csrf checking

This commit is contained in:
hanif salafi 2025-11-05 09:28:21 +07:00
parent b3bfb2bc3d
commit 38a72b74c6
1 changed files with 51 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/middleware/register.middleware.go
View File

@ -70,6 +70,8 @@ func (m *Middleware) Register(db *database.Database) {
// CSRF CONFIG // CSRF CONFIG
//=============================== //===============================
// Only setup CSRF middleware if enabled
if m.Cfg.Middleware.Csrf.Enable {
// Custom storage for CSRF // Custom storage for CSRF
csrfSessionStorage := &PostgresStorage{ csrfSessionStorage := &PostgresStorage{
DB: db.DB, DB: db.DB,
@ -106,7 +108,6 @@ func (m *Middleware) Register(db *database.Database) {
}() }()
m.App.Use(csrf.New(csrf.Config{ m.App.Use(csrf.New(csrf.Config{
Next: utilsSvc.IsEnabled(m.Cfg.Middleware.Csrf.Enable),
KeyLookup: "header:" + csrf.HeaderName, KeyLookup: "header:" + csrf.HeaderName,
CookieName: m.Cfg.Middleware.Csrf.CookieName, CookieName: m.Cfg.Middleware.Csrf.CookieName,
CookieSameSite: m.Cfg.Middleware.Csrf.CookieSameSite, CookieSameSite: m.Cfg.Middleware.Csrf.CookieSameSite,
@ -123,6 +124,7 @@ func (m *Middleware) Register(db *database.Database) {
Session: store, Session: store,
SessionKey: "fiber.csrf.token", SessionKey: "fiber.csrf.token",
})) }))
}
//=============================== //===============================
m.App.Use(AuditTrailsMiddleware(db.DB)) m.App.Use(AuditTrailsMiddleware(db.DB))
@ -141,7 +143,7 @@ func (m *Middleware) Register(db *database.Database) {
Next: utilsSvc.IsEnabled(m.Cfg.Middleware.Monitor.Enable), Next: utilsSvc.IsEnabled(m.Cfg.Middleware.Monitor.Enable),
})) }))
// Route for generate CSRF token // Route for generate CSRF token (only available if CSRF is enabled)
m.App.Get("/csrf-token", func(c *fiber.Ctx) error { m.App.Get("/csrf-token", func(c *fiber.Ctx) error {
// Retrieve CSRF token from Fiber's middleware context // Retrieve CSRF token from Fiber's middleware context
token, ok := c.Locals("csrf").(string) token, ok := c.Locals("csrf").(string)