get token from request cookies alternatively - closes #2

dneustadt · Nov 12, 2020 · 8bb0796 · 8bb0796
1 parent 6c3f875
commit 8bb0796
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Service/CsrfRequestEvaluator.php b/Service/CsrfRequestEvaluator.php
@@ -102,7 +102,9 @@ public function getHeader(Request $request, ?Response $response): void
 
     public function isTokenValid(Request $request, bool $throwException = true): bool
     {
-        $token = $request->headers->get($this->cookieHeader);
+        $token = $request->headers->has($this->cookieHeader) ?
+            $request->headers->get($this->cookieHeader) :
+            $request->cookies->get($this->cookieHeader);
 
         if (empty($token)) {
             if ($throwException === false) {