hapijs / crumb

CSRF crumb generation and validation for hapi
Other
171 stars 50 forks source link

HMAC based token pattern #156

Open gdelpu opened 3 years ago

gdelpu commented 3 years ago

Support plan

Context

What problem are you trying to solve?

One of my project needed a stateless way to handle CSRF token, the customer's security team wanted us to implement the HMAC based token pattern as describe in the OWASP cheatsheet.

Do you have a new or modified API suggestion to solve the problem?

I did an implementation of the pattern and though it could be a great addition for the community, therefore I propose the pull request #155 to add this feature to CRUMB.