Tim Wundenberg
8aeb284d30
Some checks failed
Build Docker Image / Build-Docker-Image (push) Failing after 37s
22 lines
534 B
Go
22 lines
534 B
Go
package middleware
|
|
|
|
import "net/http"
|
|
|
|
func CrossSiteRequestForgery() func(http.Handler) http.Handler {
|
|
return func(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
if r.Method == "POST" {
|
|
// Check the CSRF token
|
|
csrfToken := r.Header.Get("X-CSRF-Token")
|
|
sessionToken := r.Header.Get("X-Session-Token")
|
|
if csrfToken != sessionToken {
|
|
http.Error(w, "CSRF token mismatch", http.StatusForbidden)
|
|
return
|
|
}
|
|
}
|
|
|
|
next.ServeHTTP(w, r)
|
|
})
|
|
}
|
|
}
|