feat: move csrf validation out of requestdept-remove-csrf-dependency-from-request

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>

1 files changed, 24 insertions, 0 deletions

diff --git a/lib/public/Security/CSRF/ICsrfValidator.php b/lib/public/Security/CSRF/ICsrfValidator.php
new file mode 100644
index 00000000000..2c64c825f04
--- /dev/null
+++ b/lib/public/Security/CSRF/ICsrfValidator.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace OCP\Security\CSRF;
+
+use OCP\IRequest;
+
+/**
+ * SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+/**
+ * @since 31.0.0
+ */
+interface ICsrfValidator {
+	/**
+	 * Check if a request uses a valid csrf token.
+	 *
+	 * @since 31.0.0
+	 */
+	public function validate(IRequest $request): bool;
+}