mirror of
https://github.com/1Panel-dev/1Panel.git
synced 2024-11-15 20:20:11 +08:00
29 lines
621 B
Go
29 lines
621 B
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"net/http"
|
||
|
|
|
||
|
|
"github.com/1Panel-dev/1Panel/global"
|
||
|
|
"github.com/gin-gonic/gin"
|
||
|
|
"github.com/gorilla/csrf"
|
||
|
|
adapter "github.com/gwatts/gin-adapter"
|
||
|
|
)
|
||
|
|
|
||
|
|
func CSRF() gin.HandlerFunc {
|
||
|
|
csrfMd := csrf.Protect(
|
||
|
|
[]byte(global.CONF.Csrf.Key),
|
||
|
|
csrf.ErrorHandler(http.HandlerFunc(
|
||
|
|
func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
w.WriteHeader(http.StatusForbidden)
|
||
|
|
_, _ = w.Write([]byte("message: csrf token invalid"))
|
||
|
|
})),
|
||
|
|
)
|
||
|
|
return adapter.Wrap(csrfMd)
|
||
|
|
}
|
||
|
|
|
||
|
|
func LoadCsrfToken() gin.HandlerFunc {
|
||
|
|
return func(c *gin.Context) {
|
||
|
|
c.Header("X-CSRF-TOKEN", csrf.Token(c.Request))
|
||
|
|
}
|
||
|
|
}
|