14
14
*/
15
15
namespace Cake \Http \Middleware ;
16
16
17
+ use Cake \Http \Response ;
18
+ use Cake \Http \ServerRequest ;
17
19
use Cake \I18n \Time ;
18
20
use Cake \Network \Exception \InvalidCsrfTokenException ;
19
21
use Cake \Utility \Hash ;
20
22
use Cake \Utility \Security ;
21
- use Psr \Http \Message \ResponseInterface ;
22
- use Psr \Http \Message \ServerRequestInterface ;
23
23
24
24
/**
25
25
* Provides CSRF protection & validation.
@@ -77,12 +77,12 @@ public function __construct(array $config = [])
77
77
/**
78
78
* Checks and sets the CSRF token depending on the HTTP verb.
79
79
*
80
- * @param \Psr \Http\Message\ServerRequestInterface $request The request.
81
- * @param \Psr \Http\Message\ResponseInterface $response The response.
80
+ * @param \Cake \Http\ServerRequest $request The request.
81
+ * @param \Cake \Http\Response $response The response.
82
82
* @param callable $next Callback to invoke the next middleware.
83
- * @return \Psr \Http\Message\ResponseInterface A response
83
+ * @return \Cake \Http\Response A response
84
84
*/
85
- public function __invoke (ServerRequestInterface $ request , ResponseInterface $ response , $ next )
85
+ public function __invoke (ServerRequest $ request , Response $ response , $ next )
86
86
{
87
87
$ cookies = $ request ->getCookieParams ();
88
88
$ cookieData = Hash::get ($ cookies , $ this ->_config ['cookieName ' ]);
@@ -109,10 +109,10 @@ public function __invoke(ServerRequestInterface $request, ResponseInterface $res
109
109
/**
110
110
* Checks if the request is POST, PUT, DELETE or PATCH and validates the CSRF token
111
111
*
112
- * @param \Psr \Http\Message\ServerRequestInterface $request The request object.
113
- * @return \Psr \Http\Message\ServerRequestInterface
112
+ * @param \Cake \Http\ServerRequest $request The request object.
113
+ * @return \Cake \Http\ServerRequest
114
114
*/
115
- protected function _validateAndUnsetTokenField (ServerRequestInterface $ request )
115
+ protected function _validateAndUnsetTokenField (ServerRequest $ request )
116
116
{
117
117
if (in_array ($ request ->getMethod (), ['PUT ' , 'POST ' , 'DELETE ' , 'PATCH ' ]) || $ request ->getData ()) {
118
118
$ this ->_validateToken ($ request );
@@ -140,10 +140,10 @@ protected function _createToken()
140
140
* Add a CSRF token to the request parameters.
141
141
*
142
142
* @param string $token The token to add.
143
- * @param \Psr \Http\Message\ServerRequestInterface $request The request to augment
144
- * @return \Psr \Http\Message\ServerRequestInterface Modified request
143
+ * @param \Cake \Http\ServerRequest $request The request to augment
144
+ * @return \Cake \Http\ServerRequest Modified request
145
145
*/
146
- protected function _addTokenToRequest ($ token , ServerRequestInterface $ request )
146
+ protected function _addTokenToRequest ($ token , ServerRequest $ request )
147
147
{
148
148
$ params = $ request ->getAttribute ('params ' );
149
149
$ params ['_csrfToken ' ] = $ token ;
@@ -155,11 +155,11 @@ protected function _addTokenToRequest($token, ServerRequestInterface $request)
155
155
* Add a CSRF token to the response cookies.
156
156
*
157
157
* @param string $token The token to add.
158
- * @param \Psr \Http\Message\ServerRequestInterface $request The request to validate against.
159
- * @param \Psr \Http\Message\ResponseInterface $response The response.
160
- * @return @param \Psr \Http\Message\ResponseInterface $response Modified response.
158
+ * @param \Cake \Http\ServerRequest $request The request to validate against.
159
+ * @param \Cake \Http\Response $response The response.
160
+ * @return @param \Cake \Http\Response $response Modified response.
161
161
*/
162
- protected function _addTokenCookie ($ token , ServerRequestInterface $ request , ResponseInterface $ response )
162
+ protected function _addTokenCookie ($ token , ServerRequest $ request , Response $ response )
163
163
{
164
164
$ expiry = new Time ($ this ->_config ['expiry ' ]);
165
165
@@ -175,11 +175,11 @@ protected function _addTokenCookie($token, ServerRequestInterface $request, Resp
175
175
/**
176
176
* Validate the request data against the cookie token.
177
177
*
178
- * @param \Psr \Http\Message\ServerRequestInterface $request The request to validate against.
178
+ * @param \Cake \Http\ServerRequest $request The request to validate against.
179
179
* @return void
180
180
* @throws \Cake\Network\Exception\InvalidCsrfTokenException When the CSRF token is invalid or missing.
181
181
*/
182
- protected function _validateToken (ServerRequestInterface $ request )
182
+ protected function _validateToken (ServerRequest $ request )
183
183
{
184
184
$ cookies = $ request ->getCookieParams ();
185
185
$ cookie = Hash::get ($ cookies , $ this ->_config ['cookieName ' ]);
0 commit comments