This project demonstrates a CSRF (Cross-Site Request Forgery) protected authentication system using Golang. It includes user registration, login, logout, delete user and protected routes with JWT (JSON Web Tokens) for authentication and CSRF tokens for additional security.
- User registration, deletion, logout and login with bcrypt password hashing
- JWT-based authentication
- CSRF protection
- Middleware for authentication and CSRF token validation
- In-memory database for storing users and refresh tokens
- Secure storage of private and public RSA keys for JWT signing and verification
-
Clone the repository:
git clone https://github.com/GiorgiMakharadze/CSRF-auth-golang.git cd CSRF-auth-golang -
Generate RSA keys:
Generate the RSA private key:
openssl genrsa -out keys/app.rsa 2048Extract the public key:
openssl rsa -in keys/app.rsa -pubout -out keys/app.rsa.pub- Install Dependencies:
go mod tidy- Run the Application:
go run main.go- Access the Application:
Open your browser and navigate to http://localhost:9000/register.