From 6e176840c882cfe11152de6350788d74374a54ae Mon Sep 17 00:00:00 2001
From: Daniel Kesselberg <mail@danielkesselberg.de>
Date: Tue, 15 Aug 2023 18:58:52 +0200
Subject: feat: move csrf validation out of request

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
---
 lib/public/Security/CSRF/ICsrfValidator.php | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 lib/public/Security/CSRF/ICsrfValidator.php

(limited to 'lib/public/Security/CSRF')

diff --git a/lib/public/Security/CSRF/ICsrfValidator.php b/lib/public/Security/CSRF/ICsrfValidator.php
new file mode 100644
index 00000000000..2c64c825f04
--- /dev/null
+++ b/lib/public/Security/CSRF/ICsrfValidator.php
@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace OCP\Security\CSRF;
+
+use OCP\IRequest;
+
+/**
+ * SPDX-FileCopyrightText: 2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+/**
+ * @since 31.0.0
+ */
+interface ICsrfValidator {
+	/**
+	 * Check if a request uses a valid csrf token.
+	 *
+	 * @since 31.0.0
+	 */
+	public function validate(IRequest $request): bool;
+}
-- 
cgit v1.2.3