leap.web.security.csrf

类 DefaultCsrfManager

java.lang.Object

leap.web.security.csrf.DefaultCsrfManager

所有已实现的接口:

leap.core.ioc.PostCreateBean, CsrfManager

public class DefaultCsrfManager
extends Object
implements CsrfManager, leap.core.ioc.PostCreateBean

字段概要

字段

限定符和类型	字段和说明
protected SecurityConfig	sc
protected leap.core.security.token.TokenEncoder	tokenEncoder

构造器概要

构造器

构造器和说明
DefaultCsrfManager()

方法概要

限定符和类型	方法和说明
protected String	doGenerateToken()
String	generateToken(Request request) Generates a new csrf token.
String	loadToken(Request request) Loads the saved csrf token associated with current request..
void	postCreate(leap.core.BeanFactory factory)
void	removeToken(Request request) Removes the csrf token.
void	saveToken(Request request, String token) Saves the csrf token.
boolean	verifyToken(Request request, String token, CsrfToken expected) Returns true if the given token is valid.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

字段详细资料

sc

protected SecurityConfig sc

tokenEncoder

protected leap.core.security.token.TokenEncoder tokenEncoder

构造器详细资料

DefaultCsrfManager

public DefaultCsrfManager()

方法详细资料

generateToken

public String generateToken(Request request)
                     throws Throwable

从接口复制的说明: CsrfManager

Generates a new csrf token.

指定者:

generateToken 在接口中 CsrfManager

抛出:

Throwable

loadToken

public String loadToken(Request request)
                 throws Throwable

从接口复制的说明: CsrfManager

Loads the saved csrf token associated with current request..

指定者:

loadToken 在接口中 CsrfManager

抛出:

Throwable

verifyToken

public boolean verifyToken(Request request,
                           String token,
                           CsrfToken expected)
                    throws CsrfTokenExpiredException

从接口复制的说明: CsrfManager

Returns true if the given token is valid.

指定者:

verifyToken 在接口中 CsrfManager

抛出:

CsrfTokenExpiredException - if the given token was expired.

saveToken

public void saveToken(Request request,
                      String token)
               throws Throwable

从接口复制的说明: CsrfManager

Saves the csrf token.

指定者:

saveToken 在接口中 CsrfManager

抛出:

Throwable

removeToken

public void removeToken(Request request)
                 throws Throwable

从接口复制的说明: CsrfManager

Removes the csrf token.

指定者:

removeToken 在接口中 CsrfManager

抛出:

Throwable

doGenerateToken

protected String doGenerateToken()

postCreate

public void postCreate(leap.core.BeanFactory factory)
                throws Throwable

指定者:

postCreate 在接口中 leap.core.ioc.PostCreateBean

抛出:

Throwable