ability to set xsrf token

shared/httputil/httputil.go

@@ -3,6 +3,8 @@ package httputil
 import (
 	"net/http"
 	"strings"
+
+	"code.google.com/p/xsrftoken"
 )
 
 // IsHttps is a helper function that evaluates the http.Request
@@ -103,3 +105,26 @@ func DelCookie(w http.ResponseWriter, r *http.Request, name string) {
 
 	http.SetCookie(w, &cookie)
 }
+
+// SetXsrf writes the cookie value.
+func SetXsrf(w http.ResponseWriter, r *http.Request, token, login string) {
+	cookie := http.Cookie{
+		Name:     "XSRF-TOKEN",
+		Value:    xsrftoken.Generate(token, login, "/"),
+		Path:     "/",
+		Domain:   r.URL.Host,
+		HttpOnly: false,
+		Secure:   IsHttps(r),
+	}
+
+	http.SetCookie(w, &cookie)
+}
+
+// CheckXsrf verifies the xsrf value.
+func CheckXsrf(r *http.Request, token, login string) bool {
+	if r.Method == "GET" {
+		return true
+	}
+	return xsrftoken.Valid(
+		r.Header.Get("X-XSRF-TOKEN"), token, login, "/")
+}