Source symbols: api/csrf_token.py

Deterministic, value-free symbol metadata extracted from public source. Implementations and literal values are not copied into this page.

• Revision: main@d1d48bc9c0e6e253e87c354ce757c518820c6e25 · 2026-07-20T15:04:19Z
• Declarations: 10
• Referenced calls: 22

Declared symbols

• GetCsrfToken — class at line 17; references check_allowed_origin
• get_methods — def at line 20; references check_allowed_origin
• requires_csrf — def at line 24; references check_allowed_origin
• process — def at line 27; references check_allowed_origin
• check_allowed_origin — def at line 48; references is_login_required
• is_allowed_origin — def at line 57; references get_origin_from_request
• get_origin_from_request — def at line 73; references get, origin_from_url, strip, get_dotenv_value, split, get_default_allowed_origins, tunnel_api_process
• get_allowed_origins — def at line 87; references strip, get_dotenv_value, split, get_default_allowed_origins, tunnel_api_process
• get_default_allowed_origins — def at line 115
• initialize_allowed_origins — def at line 125; references get_dotenv_value, get_origin_from_request, get_default_allowed_origins, any, fnmatch, append, save_dotenv_value, join

File-level call references

• import — line 2
• check_allowed_origin — line 30
• token_urlsafe — line 39
• get_runtime_id — line 45
• is_login_required — line 50
• initialize_allowed_origins — line 53
• is_allowed_origin — line 55
• get_origin_from_request — line 59
• get_allowed_origins — line 64
• any — line 67
• fnmatch — line 68
• get — line 75
• origin_from_url — line 85
• strip — line 90
• get_dotenv_value — line 91
• split — line 91
• get_default_allowed_origins — line 99
• tunnel_api_process — line 105
• isinstance — line 106
• append — line 109
• save_dotenv_value — line 152
• join — line 152

Source: api/csrf_token.py