whs-authz-authn/oauth-backend
1
0
Fork 0
mirror of https://github.com/j93es/oauth-backend.git synced 2026-06-04 08:11:52 +09:00
Code Issues Projects Releases Packages Wiki Activity

[Update] csrf

Browse source
This commit is contained in:
tv0924@icloud.com 2025-06-08 12:39:24 +09:00
commit 5fe33564d6
5 changed files with 200 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

19
addon/init.py
View file

@ -2,7 +2,7 @@ from mitmproxy import http
import asyncio
from pkce_check import PKCEDowngradeChecker
from ScopeDetection import ScopeDetection
from csrf_check import CsrfChecker
class PKCEAddon:
def __init__(self):
@ -16,7 +16,21 @@ class PKCEAddon:
await self.checker.test(flow)
except Exception as e:
print(f"[ERROR] Addon failed: {e}")
pass
class CsrfAddon:
def __init__(self):
self.checker = CsrfChecker()
async def response(self, flow: http.HTTPFlow):
try:
await self.checker.response(flow)
except Exception as e:
print(f"[ERROR] CSRF Addon failed: {e}")
pass
class ScopeAddon:
def __init__(self):
self.checker = ScopeDetection()
@ -35,5 +49,4 @@ class ScopeAddon:
except Exception as e:
print(f"[ERROR] ScopeDetection failed: {e}")
addons = [PKCEAddon(), ScopeAddon()]
addons = [PKCEAddon(), ScopeAddon(), CsrfAddon()]