Package org.visallo.webster.handlers

Class CSRFHandler

java.lang.Object

org.visallo.webster.handlers.CSRFHandler

All Implemented Interfaces:

Handler, RequestResponseHandler

public class CSRFHandler
extends Object
implements RequestResponseHandler

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
class	CSRFHandler.TokenException

Field Summary

Fields

Modifier and Type	Field	Description
static String	CSRF_COOKIE_NAME

Constructor Summary

Constructors

Constructor	Description
CSRFHandler(String tokenRequestParameterName)
CSRFHandler(String tokenRequestParameterName, String tokenRequestHeaderName)

Method Summary

Modifier and Type	Method	Description
static String	getSavedToken(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
static String	getSavedToken(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, boolean createTokenIfMissing)
void	handle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, HandlerChain chain)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CSRF_COOKIE_NAME

public static final String CSRF_COOKIE_NAME

See Also:

Constant Field Values

Constructor Detail

CSRFHandler

public CSRFHandler(String tokenRequestParameterName)

CSRFHandler

public CSRFHandler(String tokenRequestParameterName,
                   String tokenRequestHeaderName)

Method Detail

getSavedToken

public static String getSavedToken(javax.servlet.http.HttpServletRequest request,
                                   javax.servlet.http.HttpServletResponse response)

getSavedToken

public static String getSavedToken(javax.servlet.http.HttpServletRequest request,
                                   javax.servlet.http.HttpServletResponse response,
                                   boolean createTokenIfMissing)

handle

public void handle(javax.servlet.http.HttpServletRequest request,
                   javax.servlet.http.HttpServletResponse response,
                   HandlerChain chain)
            throws Exception

Specified by:

handle in interface RequestResponseHandler

Throws:

Exception