GetAntiforgeryToken.cs

using System;
using System.Web;
using System.Web.Helpers;
using Sitecore.XA.Foundation.Abstractions;
using Sitecore.XA.Foundation.Scriban.Pipelines.GenerateScribanContext;
using Scriban.Runtime;

namespace Sitecore.Foundation.ScribanExtensions.Scriban
{
	public class GetAntiforgeryToken : IGenerateScribanContextProcessor
	{
		/// <summary>
		/// the context
		/// </summary>
		private readonly IContext context;
		private delegate string AntiforgeryTokenUrlDelegate();
    
		public GetAntiforgeryToken(IContext context)
		{
			this.context = context;
		}
    
		public void Process(GenerateScribanContextPipelineArgs args)
		{
			var antiforgeryTokenUrl = new AntiforgeryTokenUrlDelegate(AntiforgeryToken);
			args.GlobalScriptObject.Import("sc_getantiforgerytoken", (Delegate)antiforgeryTokenUrl);
		}
    
		public string AntiforgeryToken()
		{
			string cookieToken, formToken;
			string oldToken = null;
			// we store a request verification token in cookies also
			if (context.HttpContext.Request.Cookies[AntiForgeryConfig.CookieName] != null)
			{
				oldToken = context.HttpContext.Request.Cookies[AntiForgeryConfig.CookieName].Value;
			}			
			// method to generate request verification tokens
			AntiForgery.GetTokens(oldToken, out cookieToken, out formToken);
			// if there was a generated new cookie we update the cookie
			if (cookieToken != null)
			{
				// save the generated request verification in cookie, to evade conflict of multiple token generation because of multiple forms in one page
				var response = context.HttpContext.Response;
				var tokenCookie = new HttpCookie(AntiForgeryConfig.CookieName);
				tokenCookie.Value = cookieToken;
				// to update the cookie value we need to remove/add the cookie
				response.Cookies.Remove(AntiForgeryConfig.CookieName);
				response.Cookies.Add(tokenCookie);
			}
			else
			{
				cookieToken = oldToken;
			}
			return cookieToken + ":" + formToken;			
		}
	}
}