Merge pull request #74 from kovan/update-docs-deps-new-fix-links

Update docs to deps-new, fix broken links and wrap-csrf refs

Author: yogthos

resources/md/clojurescript.md

@@ -172,7 +172,7 @@ Above, the `input-field` component consists of a `label` component we defined ea
 
 Notice that even though `label` is a function we're not calling it, but instead we're putting it in a vector. The reason for this is that we're specifying the component hierarchy. The components will be run by Reagent when they need to be rendered.
 
-This is behavior makes it trivial to implement the [React Flux](http://facebook.github.io/react/docs/flux-overview.html) pattern.
+This is behavior makes it trivial to implement the [React Flux](https://facebookarchive.github.io/flux/docs/in-depth-overview) pattern.
 
 ```
 Views--->(actions) --> Dispatcher-->(callback)--> Stores---+
@@ -371,11 +371,12 @@ your application. It will intercept any request to the server that isn't a `HEAD
 ```clojure
 (defn home-routes [base-path]
   [base-path
-   {:middleware [middleware/wrap-csrf
-                 middleware/wrap-formats]}
+   {:middleware [middleware/wrap-formats]}
    ["/" {:get home-page}]])
 ```
 
+Note that CSRF protection is configured via `:anti-forgery` in the site defaults configuration in `system.edn`, and is applied globally by `ring-defaults` rather than as a per-route middleware.
+
 We would now need to pass the CSRF token along with the request. One way to do this is to pass the token in the `x-csrf-token` header in the request with the value of the token.
 
 To do that we'll first need to set the token as a hidden field on the page:

resources/md/guestbook.md

@@ -40,21 +40,21 @@ chmod +x posix-install.sh
 sudo ./posix-install.sh
 ```
 
-For both macOS and Linux, you will need [`clj-new`](https://github.com/seancorfield/clj-new) installed as follows:
+For both macOS and Linux, you will also need [neil](https://github.com/babashka/neil) to generate new projects:
 
 ```
-clojure -Ttools install com.github.seancorfield/clj-new '{:git/tag "v1.2.404"}' :as clj-new
+brew install babashka/brew/neil
 ```
 
-For information on customization options, for example on how to change your install location, see [the official docs here](https://clojure.org/guides/getting_started#_clojure_installer_and_cli_tools).
+Alternatively, you can use [deps-new](https://github.com/seancorfield/deps-new) directly. For information on customization options, for example on how to change your install location, see [the official docs here](https://clojure.org/guides/getting_started#_clojure_installer_and_cli_tools).
 
 ### Creating a new application
 
 Once you have the Clojure CLI installed, you can run the following commands in your terminal to
 initialize your application:
 
 ```
-clojure -Tclj-new create :template io.github.kit-clj :name kit/guestbook
+neil new io.github.kit-clj/kit kit/guestbook
 cd guestbook
 ```
 

resources/md/profiles.md

@@ -1,10 +1,10 @@
 ## Profiles
 
-Profiles are clj-new template arguments. They are helpful when you are starting a new project and know ahead of time what functionality you will need. In such cases, you can use profiles to set up a new Kit project without having to manually add libraries and wire them together.
+Profiles are template arguments used when generating a new project. They are helpful when you are starting a new project and know ahead of time what functionality you will need. In such cases, you can use profiles to set up a new Kit project without having to manually add libraries and wire them together.
 
-Unlike [modules](/docs/modules.html), profiles are tied to clj-new, the project generation tool. You can only use them when creating a project.
+Unlike [modules](/docs/modules.html), profiles are tied to the project generation tool. You can only use them when creating a project.
 
-Running `clojure -Tclj-new create :template io.github.kit-clj :name yourname/app` will create an application using the default profile template.
+Running `neil new io.github.kit-clj/kit yourname/app` will create an application using the default profile template.
 However, if you would like to attach further functionality to your template you can append profile hints for the extended functionality.
 
 Default libs included with no profile specified:
@@ -28,13 +28,13 @@ Additional profiles:
 To add a profile, pass it as an argument after your application name, e.g.:
 
 ```
-clojure -Tclj-new create :template io.github.kit-clj :name yourname/app :args '[+selmer]'
+neil new io.github.kit-clj/kit yourname/app --selmer
 ```
 
 You can also mix multiple profiles when creating the application, e.g.:
 
 ```
-clojure -Tclj-new create :template io.github.kit-clj :name yourname/app :args '[+selmer +xtdb]'
+neil new io.github.kit-clj/kit yourname/app --selmer --xtdb
 ```
 
 ### Libraries

resources/md/routes.md

@@ -61,7 +61,7 @@ In the guestbook application example we saw the following route defined:
 ```
 
 This route serves the home page when it receives a `GET` request and extracts the name and the message form parameters when it receives a `POST` request.
-Note that `POST` requests must contain a CSRF token by default. This is handled by the `middleware/wrap-csrf` declaration below:
+Note that `POST` requests must contain a CSRF token when anti-forgery protection is enabled in your site defaults configuration.
 
 ```clojure
 (defn home-routes [base-path]
@@ -70,7 +70,7 @@ Note that `POST` requests must contain a CSRF token by default. This is handled
          :post save-message!}]])
 ```
 
-Please refer [here](/docs/security.html#cross_site_request_forgery_protection) for more details on managing CSRF middleware.
+CSRF protection is provided by [ring-defaults](https://github.com/ring-clojure/ring-defaults) via the `:anti-forgery` key in your site defaults configuration in `system.edn`. When enabled, `ring.middleware.anti-forgery/wrap-anti-forgery` is applied automatically. In HTML forms, use the `{% csrf-field %}` Selmer tag to include the token.
 
 ### Return values
 

resources/md/sessions.md

@@ -37,8 +37,7 @@ Below we have a simple example of interaction with the session.
 
 (def app-routes
   [""
-   {:middleware [middleware/wrap-csrf
-                 middleware/wrap-formats]}
+   {:middleware [middleware/wrap-formats]}
    ["/login/:id" {:get (fn [{:keys [path-params] :as req}]
                          (set-user! (:id path-params) req))}]
    ["/remove" {:get remove-user!}]

resources/templates/home.html

@@ -75,10 +75,10 @@ <h3>Introductory Kit Course</h3>
 </div>
 
 <div class="column-wrapper" id="easy-start">
-  <p>Using <a href="https://clojure.org/guides/getting_started">Clojure tools</a>, getting started is as easy as:</p>
+  <p>Using <a href="https://github.com/babashka/neil">neil</a> and <a href="https://clojure.org/guides/getting_started">Clojure tools</a>, getting started is as easy as:</p>
   <pre class="bash hljs">
-    <span class="prompt">$ </span><span class="cmd">clojure -Ttools install com.github.seancorfield/clj-new '{:git/tag "v1.2.404"}' :as clj-new</span>
-    <span class="prompt">$ </span><span class="cmd">clojure -Tclj-new create :template io.github.kit-clj :name yourname/guestbook</span>
+    <span class="prompt">$ </span><span class="cmd">brew install clojure/tools/clojure babashka/brew/neil</span>
+    <span class="prompt">$ </span><span class="cmd">neil new io.github.kit-clj/kit yourname/guestbook</span>
   </pre>
   <h4><a href="https://github.com/kit-clj/playground/">Quickstart with Github Codespaces</a></h4>  
 </div>