diff --git a/src/Pecee/Http/Middleware/BaseCsrfVerifier.php b/src/Pecee/Http/Middleware/BaseCsrfVerifier.php index 4815e8c..8baaade 100644 --- a/src/Pecee/Http/Middleware/BaseCsrfVerifier.php +++ b/src/Pecee/Http/Middleware/BaseCsrfVerifier.php @@ -68,7 +68,7 @@ class BaseCsrfVerifier implements IMiddleware $token = $request->getInputHandler()->value( static::POST_KEY, - $request->getHeader(static::HEADER_KEY), + $request->getHeader(static::HEADER_KEY) ?? $request->getHeader('HTTP-' . static::HEADER_KEY), 'post' ); diff --git a/src/Pecee/Http/Request.php b/src/Pecee/Http/Request.php index e2bccae..c695008 100644 --- a/src/Pecee/Http/Request.php +++ b/src/Pecee/Http/Request.php @@ -147,6 +147,15 @@ class Request return $this->getHeader('php-auth-pw'); } + /** + * Get the csrf token + * @return string|null + */ + public function getCsrfToken(): ?string + { + return $this->getHeader('x-csrf-token') ?? $this->getHeader('http-x-csrf-token'); + } + /** * Get all headers * @return array