Skip to content

Commit

Permalink
Add third-party CSRF middlewares (#1414)
Browse files Browse the repository at this point in the history
* change github issues template

* Add third-party CSRF middlewares

Co-authored-by: Tom Christie <tom@tomchristie.com>
  • Loading branch information
aminalaee and tomchristie committed Jan 18, 2022
1 parent 3182495 commit ad495c7
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions docs/middleware.md
Expand Up @@ -250,6 +250,10 @@ This middleware adds authentication to any ASGI application, requiring users to
using their GitHub account (via [OAuth](https://developer.github.com/apps/building-oauth-apps/authorizing-oauth-apps/)).
Access can be restricted to specific users or to members of specific GitHub organizations or teams.

#### [asgi-csrf](https://github.com/simonw/asgi-csrf)

Middleware for protecting against CSRF attacks. This middleware implements the Double Submit Cookie pattern, where a cookie is set, then it is compared to a csrftoken hidden form field or an `x-csrftoken` HTTP header.

#### [AuthlibMiddleware](https://github.com/aogier/starlette-authlib)

A drop-in replacement for Starlette session middleware, using [authlib's jwt](https://docs.authlib.org/en/latest/jose/jwt.html)
Expand All @@ -259,6 +263,10 @@ module.

A middleware class for logging exceptions to [Bugsnag](https://www.bugsnag.com/).

#### [CSRFMiddleware](https://github.com/frankie567/starlette-csrf)

Middleware for protecting against CSRF attacks. This middleware implements the Double Submit Cookie pattern, where a cookie is set, then it is compared to an `x-csrftoken` HTTP header.

#### [EarlyDataMiddleware](https://github.com/HarrySky/starlette-early-data)

Middleware and decorator for detecting and denying [TLSv1.3 early data](https://tools.ietf.org/html/rfc8470) requests.
Expand Down

0 comments on commit ad495c7

Please sign in to comment.