public class DefaultCsrfManager extends Object implements CsrfManager, leap.core.ioc.PostCreateBean
| 限定符和类型 | 字段和说明 |
|---|---|
protected SecurityConfig |
sc |
protected leap.core.security.token.TokenEncoder |
tokenEncoder |
| 构造器和说明 |
|---|
DefaultCsrfManager() |
| 限定符和类型 | 方法和说明 |
|---|---|
protected String |
doGenerateToken() |
String |
generateToken(Request request)
Generates a new csrf token.
|
String |
loadToken(Request request)
Loads the saved csrf token associated with current request..
|
void |
postCreate(leap.core.BeanFactory factory) |
void |
removeToken(Request request)
Removes the csrf token.
|
void |
saveToken(Request request,
String token)
Saves the csrf token.
|
boolean |
verifyToken(Request request,
String token,
CsrfToken expected)
Returns
true if the given token is valid. |
protected SecurityConfig sc
protected leap.core.security.token.TokenEncoder tokenEncoder
public String generateToken(Request request) throws Throwable
CsrfManagergenerateToken 在接口中 CsrfManagerThrowablepublic String loadToken(Request request) throws Throwable
CsrfManagerloadToken 在接口中 CsrfManagerThrowablepublic boolean verifyToken(Request request, String token, CsrfToken expected) throws CsrfTokenExpiredException
CsrfManagertrue if the given token is valid.verifyToken 在接口中 CsrfManagerCsrfTokenExpiredException - if the given token was expired.public void saveToken(Request request, String token) throws Throwable
CsrfManagersaveToken 在接口中 CsrfManagerThrowablepublic void removeToken(Request request) throws Throwable
CsrfManagerremoveToken 在接口中 CsrfManagerThrowableprotected String doGenerateToken()
Copyright © 2019. All rights reserved.