| Modifier and Type | Field | Description |
|---|---|---|
protected static java.lang.String |
CHALLENGE_TOKEN_FORM_NAME |
|
protected static java.lang.String |
CHALLENGE_TOKEN_SESSION_NAME |
| Constructor | Description |
|---|---|
SynchronizerToken(RandomString randomString) |
| Modifier and Type | Method | Description |
|---|---|---|
void |
checkTokens(javax.servlet.http.HttpServletRequest httpRequest) |
|
protected boolean |
doTokensMatch(java.util.Optional<java.lang.String> sessionChallengeToken,
java.util.Optional<java.lang.String> formChallengeToken) |
|
protected java.util.Optional<java.lang.String> |
getChallengeTokenFromForm(javax.servlet.http.HttpServletRequest request) |
|
protected java.util.Optional<java.lang.String> |
getChallengeTokenFromSession(javax.servlet.http.HttpServletRequest request) |
|
protected void |
insertChallengeTokenIntoSession(javax.servlet.http.HttpServletRequest request) |
|
protected boolean |
requestMethodRequiresChallengeToken(java.lang.String method) |
protected static java.lang.String CHALLENGE_TOKEN_SESSION_NAME
protected static java.lang.String CHALLENGE_TOKEN_FORM_NAME
public SynchronizerToken(RandomString randomString)
public void checkTokens(javax.servlet.http.HttpServletRequest httpRequest)
throws CsrfException
checkTokens in interface CsrfCsrfExceptionprotected boolean doTokensMatch(java.util.Optional<java.lang.String> sessionChallengeToken,
java.util.Optional<java.lang.String> formChallengeToken)
protected boolean requestMethodRequiresChallengeToken(java.lang.String method)
protected java.util.Optional<java.lang.String> getChallengeTokenFromSession(javax.servlet.http.HttpServletRequest request)
protected void insertChallengeTokenIntoSession(javax.servlet.http.HttpServletRequest request)
throws CsrfException
CsrfExceptionprotected java.util.Optional<java.lang.String> getChallengeTokenFromForm(javax.servlet.http.HttpServletRequest request)