Fat-Free Framework: Session CSRF Tests

index.php

<?php

require 'base.php';

$f3 = Base::instance();

/**
 * @see https://github.com/bcosca/fatfree/issues/878
 */
$f3->route('GET /session/@backend', function(Base $f3, array $args){
	$backend = $args['backend'];

	if ($backend === 'cache') {
		$f3->set('CACHE', true);
		$session = new Session();
	}

	else if ($backend === 'jig') {
		$session = new DB\JIG\Session(new DB\Jig('database.jig/'));
	}

	else if ($backend === 'mongo') {
		$db = new DB\Mongo('mongodb://localhost:27017', 'fatfree');
		$session = new DB\Mongo\Session($db);
	}

	else if ($backend === 'sql') {
	    $session = new DB\SQL\Session(new DB\SQL('sqlite:database.sqlite'));
	}

	else {
		$f3->error(404);
	}

	echo "<h1>$backend</h1>";

	var_dump([
		'SESSION.csrf' => $f3->get('SESSION.csrf'),
		'$session->csrf()' => $session->csrf(),
	]);

	$f3->set('SESSION.csrf', $session->csrf());
});

$f3->run();

NB: new keyword is missing at line 24.

Thank you for testing the Mongo backend.