csrf
A Go middleware library providing CSRF protection for web applications with support for HTML forms and JavaScript frameworks.
What is csrf?
gorilla/csrf is a Go middleware library that provides cross-site request forgery (CSRF) protection for web applications and APIs. It prevents malicious actors from executing unauthorized actions on behalf of authenticated users by validating tokens on state-changing requests like POST, PUT, and DELETE.
Go developers building web applications or RESTful APIs that require robust CSRF protection, especially those using frameworks like Gorilla, Gin, Echo, or standard net/http.
It offers a simple, secure, and framework-agnostic solution with sensible defaults, battle-tested design, and flexibility to integrate with both server-rendered HTML forms and modern JavaScript frontends.
Overview
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
Use Cases
Best For
- Securing traditional HTML form submissions in Go web applications
- Adding CSRF protection to REST APIs consumed by JavaScript frameworks like React or Angular
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
