logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

HTML::FormFu::Element::RequestToken

Attributes

context
       Value of the stash key for the Catalyst context object ($c). Defaults to "context".

   expiration_time
       Time to life for a token in seconds. Defaults to 3600.

   session_key
       Session key which is used to store the tokens. Defaults to "__token".

   limit
       Limit the number of tokens which are kept in the session. Defaults to 20.

   constraints
       Defaults to HTML::FormFu::Constraint::RequestToken and HTML::FormFu::Constraint::Required.

   message
       Set the error message.

Author

       Moritz Onken, "onken@houseofdesign.de"

Authors

       •   Carl Franks <cpan@fireartist.com>

       •   Nigel Metheringham <nigelm@cpan.org>

       •   Dean Hamstead <dean@bytefoundry.com.au>

Description

       This field can prevent CSRF attacks. It contains a random token. After submission the token is checked
       with the token which is stored in the session of the current user. See "request_token_enable" in
       Catalyst::Controller::HTML::FormFu for a convenient way how to use it.

License

       This library is free software, you can redistribute it and/or modify it under the same terms as Perl
       itself.

Methods

expire_token
       This method looks in the session for expired tokens and removes them.

   get_token
       Generates a new token and stores it in the stash.

   verify_token
       Checks whether a given token is already in the session. Returns 1 if it exists, 0 otherwise.

Name

       HTML::FormFu::Element::RequestToken - Hidden text field which contains a unique token

See Also

       Catalyst::Controller::HTML::FormFu, HTML::FormFu::Plugin::RequestToken,
       HTML::FormFu::Constraint::RequestToken

       HTML::FormFu

Synopsis

         my $e = $form->element( { type => 'Token' } );

         my $p = $form->element( { plugin => 'Token' } );

Version

       version 2.04

See Also