security

package

v0.1.0-alpha.56 Latest Latest Go to latest Published: Aug 28, 2026 License: MIT Imports: 8 Imported by: 0

Details

Package security contains framework-enforced HTTP boundary protections.

View Source

const (
	CSRFCookie = "__Host-gobeyond-csrf"
	CSRFHeader = "X-GoBeyond-CSRF"
)

This section is empty.

func StripReservedHeaders(header http.Header)

func ValidateHost(request *http.Request, allowed []string) error

func ValidateSameOrigin(request *http.Request, publicOrigin string) error

type CSRF struct {
	// contains filtered or unexported fields
}

func NewCSRF(secret []byte) (*CSRF, error)

func (c *CSRF) Cookie(token string) *http.Cookie

func (c *CSRF) Token() (string, error)

func (c *CSRF) Verify(request *http.Request, publicOrigin string) error