Function extractFormToken

internal/agent/hitl_magic_api.go:127–130

extractFormToken pulls the token from standard form encoding. Request body is expected to be application/x-www-form-urlencoded since the confirmation page submits a plain HTML form.

(r *http.Request)

// body is expected to be application/x-www-form-urlencoded since the
// confirmation page submits a plain HTML form.
func extractFormToken(r *http.Request) string {
	_ = r.ParseForm()
	return r.FormValue("t")
}

// verifyMagicToken runs the HMAC + exp + action whitelist checks and
// returns either claims or an (HTTP status, user-visible message) pair.