ProtoCore v0.0.2
Deterministic, zero-heap network stack for embedded targets
Loading...
Searching...
No Matches
csrf.cpp File Reference

Stateless HMAC-signed CSRF token implementation (PC_ENABLE_CSRF). More...

#include "csrf.h"
#include "shared_primitives/strbuf.h"

Go to the source code of this file.

Detailed Description

Stateless HMAC-signed CSRF token implementation (PC_ENABLE_CSRF).

The token is <nonce_hex>.<sig_hex>; the signature is the first CSRF_SIG_BYTES of HMAC-SHA256(secret, nonce). Verification recomputes the HMAC over the embedded nonce and constant-time compares - no server-side session state.

Definition in file csrf.cpp.