gistfile1.scala

request.headers.get(CONTENT_TYPE) match {
  case Some(ct) if ct.trim.startsWith("multipart/form-data") =>
    filterLogger.trace("[CSRF] request is multipart/form-data")
    checkMultipart(request, token, next)
  case Some(ct) if ct.trim.startsWith("application/x-www-form-urlencoded") =>
    filterLogger.trace("[CSRF] request is application/x-www-form-urlencoded")
    checkFormUrlEncodedBody(request, token, next)
  case Some(ct) if ct.trim.startsWith("text/plain") =>
    filterLogger.trace("[CSRF] request is text/playn")
    checkTextBody(request, token, next)
  case None if request.method == "GET" =>
    filterLogger.trace("[CSRF] GET request, adding the token")
    next(addRequestToken(request, token)).map(result => addResponseToken(request, result, token))(defaultContext)
  case ct =>
    filterLogger.trace("[CSRF] bypass the request (%s)".format(ct.toString))
    next(request)
}