Test_CSRF_Custom_Extractor_Struct() — fiber Function Reference

Architecture documentation for the Test_CSRF_Custom_Extractor_Struct() function in config_test.go from the fiber codebase.

Function go FiberMiddleware Security

Entity Profile

FiberMiddleware→ Security→ Test_CSRF_Custom_Extractor_Struct() — fiber Function Reference

Dependency Diagram

graph TD
  9f7adeff_4283_3ed0_bb3e_89ee14db4061["Test_CSRF_Custom_Extractor_Struct()"]
  d4b0c76b_df58_68cc_9f01_dca309899302["config_test.go"]
  9f7adeff_4283_3ed0_bb3e_89ee14db4061 -->|defined in| d4b0c76b_df58_68cc_9f01_dca309899302
  style 9f7adeff_4283_3ed0_bb3e_89ee14db4061 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

middleware/csrf/config_test.go lines 191–240

func Test_CSRF_Custom_Extractor_Struct(t *testing.T) {
	t.Parallel()
	app := fiber.New()

	// Custom extractor using new struct pattern
	customExtractor := extractors.Extractor{
		Extract: func(c fiber.Ctx) (string, error) {
			// Extract from custom header
			token := c.Get("X-Custom-CSRF")
			if token == "" {
				return "", extractors.ErrNotFound
			}
			return token, nil
		},
		Source: extractors.SourceCustom,
		Key:    "X-Custom-CSRF",
	}

	app.Use(New(Config{Extractor: customExtractor}))

	app.Post("/", func(c fiber.Ctx) error {
		return c.SendString("OK")
	})

	h := app.Handler()
	ctx := &fasthttp.RequestCtx{}

	// Generate CSRF token
	ctx.Request.Header.SetMethod(fiber.MethodGet)
	h(ctx)
	token := string(ctx.Response.Header.Peek(fiber.HeaderSetCookie))
	token = strings.Split(strings.Split(token, ";")[0], "=")[1]

	// Test with custom header
	ctx.Request.Reset()
	ctx.Response.Reset()
	ctx.Request.Header.SetMethod(fiber.MethodPost)
	ctx.Request.Header.Set("X-Custom-CSRF", token)
	ctx.Request.Header.SetCookie(ConfigDefault.CookieName, token)
	h(ctx)
	require.Equal(t, 200, ctx.Response.StatusCode())

	// Test without custom header
	ctx.Request.Reset()
	ctx.Response.Reset()
	ctx.Request.Header.SetMethod(fiber.MethodPost)
	ctx.Request.Header.SetCookie(ConfigDefault.CookieName, token)
	h(ctx)
	require.Equal(t, 403, ctx.Response.StatusCode())
}