fix: support sha256 xsrf token lib

1 files changed, 3 insertions, 2 deletions

diff --git a/middleware/xsrf.go b/middleware/xsrf.go
index 8390c40..5b9a0b8 100644
--- a/middleware/xsrf.go
+++ b/middleware/xsrf.go
@@ -5,8 +5,9 @@ import (
 	"encoding/base64"
 	"net/http"
 	"os"
+	"time"
 
-	"golang.org/x/net/xsrftoken"
+	"github.com/haturatu/xsrftoken"
 )
 
 const (
@@ -40,7 +41,7 @@ func XSRF(next http.Handler) http.Handler {
 				clientToken = r.FormValue(xsrfFormField)
 			}
 
-			if !xsrftoken.Valid(clientToken, string(xsrfSecret), sessionID, r.URL.Path) {
+			if !xsrftoken.ValidFor(clientToken, string(xsrfSecret), sessionID, r.URL.Path, 15*time.Minute) {
 				http.Error(w, "Invalid XSRF token", http.StatusForbidden)
 				return
 			}