Skip to content

Issue 53 csrf - #64

Merged
ZhuchkaTriplesix merged 2 commits into
devfrom
issue-53-csrf
Apr 27, 2026
Merged

Issue 53 csrf#64
ZhuchkaTriplesix merged 2 commits into
devfrom
issue-53-csrf

Conversation

@ZhuchkaTriplesix

@ZhuchkaTriplesix ZhuchkaTriplesix commented Apr 27, 2026

Copy link
Copy Markdown
Member

Summary

  • What this PR does (1–3 sentences).
  • If it closes a ticket: Closes #N (replace N).

Base branch

  • This PR targets dev, not main (unless maintainers asked for a hotfix).

Checklist

  • cargo build (and cargo clippy if you touched Rust)
  • maturin develop + tests as in docs/development.md (e.g. pytest from a clean cwd / installed wheel)
  • No unrelated drive-by refactors; commits are atomic and scoped

Note on .github/ISSUE_BACKLOG/

If you only touch issue template files under .github/ISSUE_BACKLOG/ (not application code), say so in the summary. Prefer a separate PR for backlog-only edits when possible.

@ZhuchkaTriplesix
feat: CSRF double-submit (apply_csrf, csrf_layer) (Closes #53)
c1b941a 
- oxyroute.csrf: CSRFConfig.guard, constant-time compare, 403 JSON
- apply_csrf + csrf_layer for chain with apply_cors
- docs/csrf.md, tests, backlog; export in __init__
@ZhuchkaTriplesix
fix
063c6ad
@ZhuchkaTriplesix ZhuchkaTriplesix added this to the v0.2.0 milestone Apr 27, 2026
@ZhuchkaTriplesix ZhuchkaTriplesix self-assigned this Apr 27, 2026
@ZhuchkaTriplesix ZhuchkaTriplesix linked an issue Apr 27, 2026 that may be closed by this pull request
feat: optional CSRF protection for cookie/session-based flows #53
Closed
ZhuchkaTriplesix
ZhuchkaTriplesix commented Apr 27, 2026
View reviewed changes

@ZhuchkaTriplesix ZhuchkaTriplesix left a comment

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

123

@ZhuchkaTriplesix
ZhuchkaTriplesix merged commit 8f80093 into dev Apr 27, 2026
16 checks passed
@ZhuchkaTriplesix
ZhuchkaTriplesix deleted the issue-53-csrf branch April 27, 2026 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@ZhuchkaTriplesix ZhuchkaTriplesix

Labels

None yet

Projects

None yet

Milestone

v0.2.0

Development

Successfully merging this pull request may close these issues.

feat: optional CSRF protection for cookie/session-based flows

1 participant

@ZhuchkaTriplesix