UCsrfHttp.php

Go to the documentation of this file.

<?php
namespace Ubiquity\security\csrf;
 
use Ubiquity\utils\http\UCookie;
use Ubiquity\controllers\Startup;
 
class UCsrfHttp {
 
    private const COOKIE_KEY = 'X-XSRF-TOKEN';
 
    public static function isValidPost(string $name): bool {
        $id = CsrfManager::getSelector($name);
        if (isset($_POST[$id])) {
            return CsrfManager::isValid($id, $_POST[$id]);
        }
        return false;
    }
 
    public static function isValidCookie(string $name): bool {
        $id = CsrfManager::getSelector($name);
        $value = UCookie::get(self::COOKIE_KEY, [
            $id => null
        ])[$id];
        if (isset($value)) {
            return CsrfManager::isValid($id, $value);
        }
        return false;
    }
    
    public static function isValidMeta(string $name):bool{
        $headers=Startup::getHttpInstance ()->getAllHeaders ();
        if(isset($headers['csrf-token'])){
            list($id,$value)=explode(':', $headers['csrf-token']);
            return $id===CsrfManager::getSelector($name) && CsrfManager::isValidByName($name, $value);
        }
    }
 
    public static function getTokenMeta(string $name): string {
        $token = CsrfManager::getToken($name);
        return "<meta name='csrf-token' content='{$token->getId()}:{$token->getValue()}'>";
    }
 
    public static function getTokenField(string $name): string {
        $token = CsrfManager::getToken($name);
        return "<input type='hidden' value='{$token->getValue()}' name='{$token->getId()}'>";
    }
 
    public static function addCookieToken(string $name, string $path = '/', bool $secure = true, bool $httpOnly = true): bool {
        $token = CsrfManager::getToken($name);
        return UCookie::set(self::COOKIE_KEY . '[' . $token->getId() . ']', $token->getValue(), null, $path, $secure, $httpOnly);
    }
}