PSR-15 CSRF Middleware

This middleware check every POST, PUT or DELETE request for a CSRF Token. Token are persisted using an ArrayAccess compatible Session and are generated on demand.

Installation

composer require nuboxdevcom/psr15-csrf-middleware

How to use it

$middleware = new CsrfMiddleware($_SESSION, 200);
$app->pipe($middleware);

// Generate input
$input = "<input type='hidden' name='{$middleware->getFormKey()}' value='{$middleware->generateToken()}'/>"

Middleware are constructed with this parameters:

• session, ArrayAccess|array, used to store token
• limit, int, limit the number of token to persist
• sessionKey, string
• formKey, string