for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
namespace App\Middleware;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Csrf\CsrfToken;
use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
use Symfony\Component\Security\Csrf\Exception\TokenNotFoundException;
final class VerifyCsrfToken
{
private CsrfTokenManagerInterface $tokenManager;
public function __construct(CsrfTokenManagerInterface $tokenManager)
$this->tokenManager = $tokenManager;
}
public function handle(Request $request): void
if (!$this->isCsrfTokenValid($this->getToken($request))) {
throw new TokenNotFoundException('Sorry, your session has expired. Please refresh and try again.');
private function isCsrfTokenValid(?string $token): bool
return $this->tokenManager->isTokenValid(new CsrfToken('csrf_token', $token));
private function getToken(Request $request)
return $request->query->get('csrf_token')
?? $request->get('csrf_token');
Coderberg /
ResidenceCMS
