phpolar/csrf-protection

Provides request checking and response filtering to mitigate CSRF attacks

2.0.1 2023-03-02 04:40 UTC

Requires

• php: >=8.1
• ext-mbstring: *
• phpolar/http-codes: ^0.0.6
• psr/http-message: ^1.0
• psr/http-server-handler: ^1.0
• psr/http-server-middleware: ^1.0

Requires (Dev)

• ext-ast: ^1.1
• ext-openssl: *
• phan/phan: ^5.4
• php-coveralls/php-coveralls: ^2.5
• phpmd/phpmd: ^2.13
• phpstan/phpstan: ^1.9
• phpunit/phpunit: ^10.0
• squizlabs/php_codesniffer: ^3.7

Suggests

• laminas/laminas-diactoros: Provides a PSR-7 implementation
• monolog/monolog: Allows for logging forbidden requests

Provides

• psr/http-middleware-implementation: ^1.0
• psr/http-server-handler-implementation: ^1.0

MIT

• Eric Fortmeyer

• middleware
• csrf
• psr-7
• psr-15
• request handlers

README

Csrf Protection

PSR-7 and PSR-15 based CSRF protection for HTTP requests

Table of Contents

1. Installation
2. Usage
3. Resources
4. API Documentation

Installation

composer require phpolar/csrf-protection

Usage

$csrfChecking = $this->container->get(CsrfRequestCheckMiddleware::class);
$csrfFiltering = $this->container->get(CsrfResponseFilterMiddleware::class);

$app->use($csrfChecking);
$app->use($csrfFiltering);

// ...

$response = $csrfCheckMiddleware->process($request, $nextHandler);

// ...

$preparedResponse = $middleWare->process($request, $routingHandler);

Resources

1. PSR-7
2. PSR-15
3. Example middleware setup

API Documentation

Back to top