https://github.com/adayoung/axum-csrf-form-example

Hi! This is a minimal example to demonstrate csrf failing across application restart despite static key.
https://github.com/adayoung/axum-csrf-form-example

Last synced: 12 days ago
JSON representation

Hi! This is a minimal example to demonstrate csrf failing across application restart despite static key.

• Host: GitHub
• URL: https://github.com/adayoung/axum-csrf-form-example
• Owner: adayoung
• License: unlicense
• Created: 2024-11-29T04:33:57.000Z (about 1 month ago)
• Default Branch: main
• Last Pushed: 2024-11-29T04:35:30.000Z (about 1 month ago)
• Last Synced: 2024-11-29T05:26:25.607Z (about 1 month ago)
• Language: Rust
• Size: 0 Bytes
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
1. cargo run

2. Open http://localhost:2024/

3. Submit form on the browser -> note token is valid

4. Open http://localhost:2024/ again (in a new tab or from the address bar)

5. Stop cargo run with ctrl-c and start it again

6. Submit form in the still open page from step 4 -> note token is not valid

We were missing salt! Adding salt fixed everything. Yay salt!