leap.web.security.csrf

接口 CsrfManager

所有已知实现类:

DefaultCsrfManager

public interface CsrfManager

方法概要

限定符和类型	方法和说明
String	generateToken(Request request) Generates a new csrf token.
String	loadToken(Request request) Loads the saved csrf token associated with current request..
void	removeToken(Request request) Removes the csrf token.
void	saveToken(Request request, String token) Saves the csrf token.
boolean	verifyToken(Request request, String token, CsrfToken expected) Returns true if the given token is valid.

方法详细资料

generateToken

String generateToken(Request request)
              throws Throwable

Generates a new csrf token.

抛出:

Throwable

loadToken

String loadToken(Request request)
          throws Throwable

Loads the saved csrf token associated with current request..

抛出:

Throwable

verifyToken

boolean verifyToken(Request request,
                    String token,
                    CsrfToken expected)
             throws CsrfTokenExpiredException

Returns true if the given token is valid.

抛出:

CsrfTokenExpiredException - if the given token was expired.

saveToken

void saveToken(Request request,
               String token)
        throws Throwable

Saves the csrf token.

抛出:

Throwable

removeToken

void removeToken(Request request)
          throws Throwable

Removes the csrf token.

抛出:

Throwable