org.broadleafcommerce.profile.web.core.security
Class SessionFixationProtectionCookie

java.lang.Object
  org.broadleafcommerce.profile.web.core.security.SessionFixationProtectionCookie

public class SessionFixationProtectionCookie
extends java.lang.Object

Cookie used to protected against session fixation attacks

Author:

Andre Azzolini (apazzolini)

See Also:

SessionFixationProtectionFilter

Field Summary

static java.lang.String	COOKIE_NAME
protected org.apache.commons.logging.Log	logger

Constructor Summary

SessionFixationProtectionCookie()

Method Summary

static void	forceRemove(javax.servlet.http.HttpServletResponse response)
static java.lang.String	readActiveID(javax.servlet.http.HttpServletRequest request)
static void	remove(javax.servlet.http.HttpServletResponse response)
static void	writeActiveID(javax.servlet.http.HttpServletResponse response, java.lang.String data)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final org.apache.commons.logging.Log logger

COOKIE_NAME

public static final java.lang.String COOKIE_NAME

See Also:

Constant Field Values

Constructor Detail

SessionFixationProtectionCookie

public SessionFixationProtectionCookie()

Method Detail

readActiveID

public static java.lang.String readActiveID(javax.servlet.http.HttpServletRequest request)

writeActiveID

public static void writeActiveID(javax.servlet.http.HttpServletResponse response,
                                 java.lang.String data)

remove

public static void remove(javax.servlet.http.HttpServletResponse response)

forceRemove

public static void forceRemove(javax.servlet.http.HttpServletResponse response)