websecurity

package
v0.2.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 12, 2026 License: MIT Imports: 4 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source 
var (
	ErrOriginDenied  = errors.New("request origin is denied")
	ErrCSRFRequired  = errors.New("csrf token is required")
	ErrCSRFInvalid   = errors.New("csrf token is invalid")
	ErrScopeRequired = errors.New("trusted request scope is required")
)

Functions

func WithRequestContext 

func WithRequestContext(ctx context.Context, requestContext RequestContext) context.Context

Types

type Guard 

type Guard interface {
	Evaluate(r *http.Request) (RequestContext, OriginDecision, error)
	ValidateCSRF(r *http.Request, sessionHash string) error
}

type OriginDecision 

type OriginDecision string
const (
	OriginTrustedParent OriginDecision = "trusted_parent"
	OriginDeny          OriginDecision = "deny"
)

type RequestContext 

type RequestContext struct {
	Origin string       `json:"origin"`
	Route  string       `json:"route"`
	Method string       `json:"method"`
	Scope  RequestScope `json:"scope"`
}

func RequestContextFromContext 

func RequestContextFromContext(ctx context.Context) (RequestContext, bool)

type RequestScope 

type RequestScope struct {
	OwnerSessionHash     string `json:"owner_session_hash"`
	OwnerUserHash        string `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string `json:"session_channel_id_hash"`
}

func (RequestScope) Valid 

func (s RequestScope) Valid() bool

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.