#ifndef CSRF_TOKEN_MIDDLEWARE_H
#define CSRF_TOKEN_MIDDLEWARE_H

#include "web_server_middleware.h"

#include "core/string/ustring.h"
#include "core/variant/variant.h"

class WebServerRequest;

class CSRFTokenWebServerMiddleware : public WebServerMiddleware {
	GDCLASS(CSRFTokenWebServerMiddleware, WebServerMiddleware);

public:
	PoolStringArray get_ignored_urls();
	void set_ignored_urls(const PoolStringArray &val);

	//returnring true means handled, false means continue
	bool _on_before_handle_request_main(Ref<WebServerRequest> request);

	bool shold_ignore(Ref<WebServerRequest> request);

	virtual String create_token();

	CSRFTokenWebServerMiddleware();
	~CSRFTokenWebServerMiddleware();

	PoolStringArray ignored_urls;

protected:
	static void _bind_methods();
};

#endif