CsrfAwareActionInterface.php 943 B

123456789101112131415161718192021222324252627282930313233343536373839
  1. <?php
  2. /**
  3. * Copyright © Magento, Inc. All rights reserved.
  4. * See COPYING.txt for license details.
  5. */
  6. declare(strict_types=1);
  7. namespace Magento\Framework\App;
  8. use Magento\Framework\App\Request\InvalidRequestException;
  9. /**
  10. * Action that's aware of CSRF protection.
  11. */
  12. interface CsrfAwareActionInterface extends ActionInterface
  13. {
  14. /**
  15. * Create exception in case CSRF validation failed.
  16. * Return null if default exception will suffice.
  17. *
  18. * @param RequestInterface $request
  19. *
  20. * @return InvalidRequestException|null
  21. */
  22. public function createCsrfValidationException(
  23. RequestInterface $request
  24. ): ?InvalidRequestException;
  25. /**
  26. * Perform custom request validation.
  27. * Return null if default validation is needed.
  28. *
  29. * @param RequestInterface $request
  30. *
  31. * @return bool|null
  32. */
  33. public function validateForCsrf(RequestInterface $request): ?bool;
  34. }