starlette-csrf

Improvements

• Rewrite as a pure ASGI middleware, without BaseHTTPMiddleware as it's now deprecated.
• Bump dependencies:
  • starlette >=0.14.2,<0.21.0

Bug fixes and improvements

• Bump dependencies:
  • starlette >=0.14.2,<0.20.0
  • itsdangerous >=2.0.1,<3.0.0

Fixes and improvements

• Put submitted CSRF token retrieval logic in a separate method _get_submitted_csrf_token for easier overloading.

Bug fixes and improvements

• Bump dependencies:
  • starlette >=0.14.2,<0.19.0

New features

• The error response logic is now in its own separate method to ease overloading in case you need a custom error response. [Documentation]

Improvements

• Bump packages:
  • starlette >=0.14.2,<0.18.0

New features

• Allow to exempt some routes from CSRF protection following Regex patterns. Thanks @lsapan 🎉

Improvements

• Bump packages:
  • starlette >=0.14.2,<0.17.0
  • itsdangerous ==2.0.1