Merge pull request #10 from skipperbent/development

Development
This commit is contained in:
Simon Sessingø
2015-10-22 19:34:57 +02:00
3 changed files with 15 additions and 7 deletions
+1 -1
View File
@@ -33,7 +33,7 @@ Add the latest version pf Simple PHP Router to your ```composer.json```
- Global Constraints - Global Constraints
- Sub-Domain Routing - Sub-Domain Routing
- Optional/required parameters - Required parameters
## Initialising the router ## Initialising the router
@@ -0,0 +1,4 @@
<?php
namespace Pecee\Exception;
class TokenMismatchException extends \Exception {}
@@ -1,10 +1,9 @@
<?php <?php
namespace Pecee\Http\Middleware; namespace Pecee\Http\Middleware;
use Pecee\CsrfToken; use Pecee\CsrfToken;
use Pecee\Exception\TokenMismatchException;
use Pecee\Http\Request; use Pecee\Http\Request;
use Pecee\SimpleRouter\RouterException;
class BaseCsrfVerifier extends Middleware { class BaseCsrfVerifier extends Middleware {
@@ -12,6 +11,12 @@ class BaseCsrfVerifier extends Middleware {
const HEADER_KEY = 'X-CSRF-TOKEN'; const HEADER_KEY = 'X-CSRF-TOKEN';
protected $except; protected $except;
protected $csrfToken;
public function __construct() {
$this->csrfToken = new CsrfToken();
}
/** /**
* Check if the url matches the urls in the except property * Check if the url matches the urls in the except property
@@ -52,9 +57,8 @@ class BaseCsrfVerifier extends Middleware {
$token = $request->getHeader(self::HEADER_KEY); $token = $request->getHeader(self::HEADER_KEY);
} }
$tokenValidator = new CsrfToken(); if( !$this->csrfToken->validate( $token ) ) {
if( !$tokenValidator->validate( $token ) ) { throw new TokenMismatchException('Invalid csrf-token.');
throw new RouterException('Invalid csrf-token.');
} }
} }