leap.web.security.csrf

类 CsrfActionInterceptor

java.lang.Object

leap.web.security.csrf.CsrfActionInterceptor

所有已实现的接口:

leap.lang.intercepting.Interceptor, ActionInterceptor

public class CsrfActionInterceptor
extends Object
implements ActionInterceptor

字段概要

字段

限定符和类型	字段和说明
protected CsrfManager	csrfManager
protected SecurityConfig	securityConfig

构造器概要

构造器

构造器和说明
CsrfActionInterceptor()

方法概要

限定符和类型	方法和说明
protected void	checkCsrfToken(Request request, CsrfToken expected)
protected String	getCsrfTokenString(Request request)
protected boolean	isEnabled(ActionContext context)
leap.lang.intercepting.State	preExecuteAction(ActionContext context, leap.core.validation.Validation validation)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

从接口继承的方法 leap.web.action.ActionInterceptor

completeExecuteAction, onActionFailure, postExecuteAction, preResolveActionParameters

字段详细资料

securityConfig

protected SecurityConfig securityConfig

csrfManager

protected CsrfManager csrfManager

构造器详细资料

CsrfActionInterceptor

public CsrfActionInterceptor()

方法详细资料

preExecuteAction

public leap.lang.intercepting.State preExecuteAction(ActionContext context,
                                                     leap.core.validation.Validation validation)
                                              throws Throwable

指定者:

preExecuteAction 在接口中 ActionInterceptor

抛出:

Throwable

isEnabled

protected boolean isEnabled(ActionContext context)

checkCsrfToken

protected void checkCsrfToken(Request request,
                              CsrfToken expected)
                       throws Throwable

抛出:

Throwable

getCsrfTokenString

protected String getCsrfTokenString(Request request)