CSRF protection using HMAC-signed state tokens (RFC 5869, RFC 2104)
1(lang dune 3.21)
2(using mdx 0.4)
3(name csrf)
4
5(generate_opam_files true)
6
7(source (tangled gazagnaire.org/ocaml-csrf))
8(license MIT)
9(authors "Thomas Gazagnaire <thomas@gazagnaire.org>")
10(maintainers "Thomas Gazagnaire <thomas@gazagnaire.org>")
11
12(package
13 (name csrf)
14 (synopsis "CSRF protection using HMAC-signed state tokens")
15 (tags (org:blacksun network http crypto))
16 (description "CSRF protection using HMAC-signed state tokens with HKDF key derivation (RFC 5869) and constant-time signature verification. Provides sign_state and verify_state functions for secure OAuth state parameters.")
17 (depends
18 (ocaml (>= 4.08))
19 (dune (>= 3.0))
20 (nox-kdf (>= 0.1))
21 (digestif (>= 1.2))
22 (eqaf (>= 0.9))
23 (alcotest :with-test)
24 (alcobar :with-test)
25 (nox-crypto-rng (and :with-test (>= 0.11.0)))
26 (mdx :with-test)
27 (odoc :with-doc)))