get csrf token in request; Test for prefix 'http-' in csrf token header

This commit is contained in:
Marius Karstedt
2021-03-21 11:40:37 +01:00
parent e78040aabd
commit 05e5461acb
2 changed files with 10 additions and 1 deletions
@@ -68,7 +68,7 @@ class BaseCsrfVerifier implements IMiddleware
$token = $request->getInputHandler()->value( $token = $request->getInputHandler()->value(
static::POST_KEY, static::POST_KEY,
$request->getHeader(static::HEADER_KEY), $request->getHeader(static::HEADER_KEY) ?? $request->getHeader('HTTP-' . static::HEADER_KEY),
'post' 'post'
); );
+9
View File
@@ -147,6 +147,15 @@ class Request
return $this->getHeader('php-auth-pw'); return $this->getHeader('php-auth-pw');
} }
/**
* Get the csrf token
* @return string|null
*/
public function getCsrfToken(): ?string
{
return $this->getHeader('x-csrf-token') ?? $this->getHeader('http-x-csrf-token');
}
/** /**
* Get all headers * Get all headers
* @return array * @return array