package csrf

import (
	"net/http"
)

func UpdateCsrf(w http.ResponseWriter, cookieName string, secure bool) (string, error) {
	cookieValue, err := generateToken(CsrfLength)
	if err != nil {
		return "", err
	}
	http.SetCookie(w, &http.Cookie{
		Name:     cookieName,
		Value:    cookieValue,
		Path:     "/",
		HttpOnly: false,
		Secure:   secure,
		SameSite: http.SameSiteLaxMode,
	})
	return cookieValue, nil
}