In the example:middleware/csrf/custom_errorfunc/main.go,the function myErrFunc does not implement what the author wants.

[Tracy-coder]

In the example:middleware/csrf/custom_errorfunc/main.go,the function myErrFunc does not implement what the author wants.

hertz-examples/middleware/csrf/custom_errorfunc/main.go

Lines 32 to 40 in 231bdf8

	var (
	errMissingHeader = errors.New("[CSRF] missing csrf token in header")
	errMissingQuery = errors.New("[CSRF] missing csrf token in query")
	errMissingParam = errors.New("[CSRF] missing csrf token in param")
	errMissingForm = errors.New("[CSRF] missing csrf token in form")
	errMissingSalt = errors.New("[CSRF] missing salt")
	errInvalidToken = errors.New("[CSRF] invalid token")
	)

hertz-examples/middleware/csrf/custom_errorfunc/main.go

Lines 42 to 54 in 231bdf8

	func myErrFunc(_ context.Context, ctx *app.RequestContext) {
	err := ctx.Errors.Last()
	switch err {
	case errMissingForm, errMissingParam, errMissingHeader, errMissingQuery:
	ctx.String(http.StatusBadRequest, err.Error()) // extract csrf-token failed
	case errMissingSalt:
	fmt.Println(err.Error())
	ctx.String(http.StatusInternalServerError, err.Error()) // get salt failed,which is unexpected
	case errInvalidToken:
	ctx.String(http.StatusBadRequest, err.Error()) // csrf-token is invalid
	}
	ctx.Abort()
	}

The switch statement can't be used for error handling in this way, which may be misleading for those reading this example.

[Claude-Zq]

Thanks for the reminder.