Package org.springframework.security.messaging.web.csrf

Class CsrfChannelInterceptor

  • All Implemented Interfaces:
    org.springframework.messaging.support.ChannelInterceptor
    public final class CsrfChannelInterceptor
extends org.springframework.messaging.support.ChannelInterceptorAdapter
    ChannelInterceptorAdapter that validates that a valid CSRF is included in the header of any SimpMessageType.CONNECT message. The expected CsrfToken is populated by CsrfTokenHandshakeInterceptor.
    Since:
    4.0

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.messaging.Message<?> preSend​(org.springframework.messaging.Message<?> message, org.springframework.messaging.MessageChannel channel)  

      • Methods inherited from class org.springframework.messaging.support.ChannelInterceptorAdapter

        afterReceiveCompletion, afterSendCompletion, postReceive, postSend, preReceive

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • CsrfChannelInterceptor

        public CsrfChannelInterceptor()

    • Method Detail

      • preSend

        public org.springframework.messaging.Message<?> preSend​(org.springframework.messaging.Message<?> message,
                                                        org.springframework.messaging.MessageChannel channel)
        Specified by:
        preSend in interface org.springframework.messaging.support.ChannelInterceptor
        Overrides:
        preSend in class org.springframework.messaging.support.ChannelInterceptorAdapter