Everything under Quiote\Security\Csrf.
| Class | Description |
|---|
CsrfManager | Application-facing CSRF helper. |
CsrfPlugin | Registers the CSRF middleware pair through the generic plugin seam instead of MiddlewarePipeline hardcoding them. |
RandomnessBackedTokenGenerator | A drop-in replacement for Symfony’s default UriSafeTokenGenerator, generating the same URI-safe base64 shape but through RandomnessInterface instead of a direct random_bytes() call — so a cassette that records the RandomnessInterface reads behind a CSRF token can reproduce that exact token value on replay, and a request whose form POST depends on it does not fail the CSRF check purely because the token could not be regenerated deterministically. |
SessionTokenStorage | Symfony CSRF TokenStorage backed by Quiote’s session. |