Help! Can someone show some code snippets about csrf to me?

zwjat · July 17, 2021, 2:39am

In website, add csrf to post request is mandatory. Now, I have no idea about the way to add it. Can anyone show some code snippets about csrf in sanic app?

Great thanks.

ahopkins · July 17, 2021, 7:21pm

I have some resources from a presentation I gave:

github.com

ahopkins/europython2020-overcoming-access-control/blob/83fea9132204c290e619cd1c3bf2fc85b16db0cd/examples/server-just-sanic.py

import os
import typing as t
from base64 import b64decode, b64encode
from datetime import datetime, timedelta

from cryptography.fernet import Fernet, InvalidToken

import jwt
from sanic import Sanic
from sanic.exceptions import Forbidden, Unauthorized
from sanic.log import logger
from sanic.request import Request
from sanic.response import HTTPResponse, json
from sscopes import validate

# These are the HTTP methods that we want to enforce CSRF upon
HTTP_UNSAFE_METHODS = ("POST", "PUT", "PATCH", "DELETE")

# We will be encrypting a bit of random text as our CSRF key using some bytes
CSRF_REF_BYTES = 16

This file has been truncated. show original

zwjat · July 19, 2021, 6:54am

I really really really appreciate your help.