org.fenixedu.bennu.spring.security

Class CSRFTokenRepository

java.lang.Object

org.fenixedu.bennu.spring.security.CSRFTokenRepository

public class CSRFTokenRepository
extends Object

Repository responsible for the handling of CSRFTokens.

Author:

João Carvalho (joao.pedro.carvalho@tecnico.ulisboa.pt)

Constructor Summary

Constructors

Constructor and Description
CSRFTokenRepository()

Method Summary

Modifier and Type	Method and Description
protected CSRFToken	generateNewToken() Generates a new CSRFToken.
CSRFToken	getToken(javax.servlet.http.HttpServletRequest request) Returns the CSRFToken associated with the given request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CSRFTokenRepository

public CSRFTokenRepository()

Method Detail

getToken

public CSRFToken getToken(javax.servlet.http.HttpServletRequest request)

Returns the CSRFToken associated with the given request. The default implementation stores the token itself in the HttpSession, generating a new one, if no token is currently associated.

Parameters:

request - The request for which to return the token

Returns:

The token associated with the given request

generateNewToken

protected CSRFToken generateNewToken()

Generates a new CSRFToken.

Returns:

A new, randomly-generated CSRFToken