Instance Constructors

1.  new CSRFConfig()
2.  new CSRFConfig(tokenName: String = "csrfToken", cookieName: Option[String] = None, secureCookie: Boolean = false, httpOnlyCookie: Boolean = false, sameSiteCookie: Option[SameSite] = Some(SameSite.Lax), createIfNotFound: (RequestHeader) => Boolean = CSRFConfig.defaultCreateIfNotFound, postBodyBuffer: Long = 102400, signTokens: Boolean = true, checkMethod: (String) => Boolean = !CSRFConfig.SafeMethods.contains(_), checkContentType: (Option[String]) => Boolean = _ => true, headerName: String = "Csrf-Token", shouldProtect: (RequestHeader) => Boolean = _ => false, bypassCorsTrustedOrigins: Boolean = true)
   tokenName

   The name of the token.

   cookieName

   If defined, the name of the cookie to read the token from/write the token to.

   secureCookie

   If using a cookie, whether it should be secure.

   httpOnlyCookie

   If using a cookie, whether it should have the HTTP only flag.

   sameSiteCookie

   If using a cookie, the cookie's SameSite attribute.

   postBodyBuffer

   How much of the POST body should be buffered if checking the body for a token.

   signTokens

   Whether tokens should be signed.

   checkMethod

   Returns true if a request for that method should be checked.

   checkContentType

   Returns true if a request for that content type should be checked.

   headerName

   The name of the HTTP header to check for tokens from.

   shouldProtect

   A function that decides based on the headers of the request if a check is needed.

   bypassCorsTrustedOrigins

   Whether to bypass the CSRF check if the CORS filter trusts this origin