---

CsrfProtectionMiddleware

• Full name: \Codefy\Framework\Http\Middleware\Csrf\CsrfProtectionMiddleware
• This class implements: \Psr\Http\Server\MiddlewareInterface

Properties

configContainer

protected \Qubus\Config\ConfigContainer $configContainer

---

sessionService

protected \Qubus\Http\Session\SessionService $sessionService

---

Methods

__construct

public __construct(\Qubus\Config\ConfigContainer $configContainer, \Qubus\Http\Session\SessionService $sessionService): mixed

Parameters:

Parameter	Type	Description
$configContainer	\Qubus\Config\ConfigContainer
$sessionService	\Qubus\Http\Session\SessionService

---

process

public process(\Psr\Http\Message\ServerRequestInterface $request, \Psr\Http\Server\RequestHandlerInterface $handler): \Psr\Http\Message\ResponseInterface

Parameters:

Parameter	Type	Description
$request	\Psr\Http\Message\ServerRequestInterface
$handler	\Psr\Http\Server\RequestHandlerInterface

---

needsProtection

Check for methods not defined as safe.

private needsProtection(\Psr\Http\Message\ServerRequestInterface $request): bool

Parameters:

Parameter	Type	Description
$request	\Psr\Http\Message\ServerRequestInterface

---

tokensMatch

private tokensMatch(\Psr\Http\Message\ServerRequestInterface $request): bool

Parameters:

Parameter	Type	Description
$request	\Psr\Http\Message\ServerRequestInterface

Throws:

• Exception

---

fetchToken

private fetchToken(\Psr\Http\Message\ServerRequestInterface $request): string

Parameters:

Parameter	Type	Description
$request	\Psr\Http\Message\ServerRequestInterface

Throws:

• Exception

• Exception

---

getTokenFromRequest

private getTokenFromRequest(\Psr\Http\Message\ServerRequestInterface $request): string

Parameters:

Parameter	Type	Description
$request	\Psr\Http\Message\ServerRequestInterface

Throws:

• Exception

---

Inherited methods

generateToken

protected generateToken(): string

Throws:

• Exception

---

prepareToken

protected prepareToken(\Qubus\Http\Session\HttpSession $session): string

Parameters:

Parameter	Type	Description
$session	\Qubus\Http\Session\HttpSession

Throws:

• Exception

---

hashEquals

protected hashEquals(string $knownString, string $userString): bool

Parameters:

Parameter	Type	Description
$knownString	string
$userString	string

Throws:

• Exception

---

---

Automatically generated on 2025-10-13

2025-10-132025-10-13