Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: csrf and session integration using redis #30

Merged
merged 31 commits into from
Jun 9, 2023
Merged

Conversation

jmcdo29
Copy link
Owner

@jmcdo29 jmcdo29 commented Jun 3, 2023

General idea behind the csrf checker

flowchart TD
    A[Browser] -->|Makes GET /csrf| B{Has active Session}
    B -->|No| C[Create Session]
    B -->|Yes| D{Has Valid CSRF Header}
    D -->|Yes| F[Continue Request]
    D -->|No| E((Error))
    C --> G[Creaet CSRF token]
    G -->|Send CSRF as response| A
Loading

@nx-cloud
Copy link

nx-cloud bot commented Jun 3, 2023

☁️ Nx Cloud Report

CI is running/has finished running commands for commit af3108c. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this branch


✅ Successfully ran 3 targets

Sent with 💌 from NxCloud.

Copy link
Owner Author

@jmcdo29 jmcdo29 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code, fortunately, looks good and makes sense a few days later! All that's left to do is write some tests around the csrf assignment and what should happen

@jmcdo29 jmcdo29 merged commit 736ae40 into main Jun 9, 2023
@jmcdo29 jmcdo29 deleted the feat/csrf-security branch June 9, 2023 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant