at.porscheinformatik.tapestry.csrfprotection.services

Interface CsrfTokenRepository

All Known Implementing Classes:

SessionCsrfTokenRepository, SpringCsrfTokenRepository

public interface CsrfTokenRepository

Generates CSRF tokens.

Note that the tokens should be generated in safe way - that means they should not be guessable.

Method Summary

Modifier and Type	Method and Description
CsrfToken	generateToken()
CsrfToken	loadToken() Loads the expected CsrfToken from the HttpServletRequest
void	saveToken(CsrfToken token) Saves the CsrfToken using the HttpServletRequest and HttpServletResponse.

Method Detail

generateToken

CsrfToken generateToken()

Returns:

a newly generated CSRF token

saveToken

void saveToken(CsrfToken token)

Saves the CsrfToken using the HttpServletRequest and HttpServletResponse. If the CsrfToken is null, it is the same as deleting it.

Parameters:

token - the CsrfToken to save or null to delete

loadToken

CsrfToken loadToken()

Loads the expected CsrfToken from the HttpServletRequest

Returns:

the CsrfToken or null if none exists