https://github.com/heartsucker/iron-csrf

CSRF protection for the Rust web framework Iron
https://github.com/heartsucker/iron-csrf

cryptography csrf csrf-protection http iron rust

Last synced: 7 days ago
JSON representation

CSRF protection for the Rust web framework Iron

• Host: GitHub
• URL: https://github.com/heartsucker/iron-csrf
• Owner: heartsucker
• License: mit
• Created: 2017-02-19T11:17:42.000Z (over 7 years ago)
• Default Branch: develop
• Last Pushed: 2020-06-16T11:21:50.000Z (over 4 years ago)
• Last Synced: 2024-11-02T14:51:38.609Z (14 days ago)
• Topics: cryptography, csrf, csrf-protection, http, iron, rust
• Language: Rust
• Homepage: https://crates.io/crates/iron-csrf
• Size: 144 KB
• Stars: 4
• Watchers: 4
• Forks: 2
• Open Issues: 4
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# iron-csrf

CSRF protection for the Rust web framework Iron.

`iron-csrf` uses either ChaCha20Poly1305 or AES-GCM to sign and verify timestamped

CSRF cookies and their accompanying tokens.

There is an example `iron` server in the directory [./examples](./examples), and more

information can be found in the docs hosted at [docs.rs](https://docs.rs/iron-csrf/).

A complete reference implementation can be found on

[github](https://github.com/heartsucker/iron-reference).

## Contributing

Please make all pull requests to the `develop` branch.

### Bugs

This project has a **full disclosure** policy on security related errors. Please

treat these errors like all other bugs and file a public issue. Errors communicated

via other channels will be immediately made public.

## Legal

### License

This work is licensed under the MIT license. See [LICENSE](./LICENSE) for details.