A B C D G H I L N P S T V

A

addCsrfFilter(OrderedConfiguration<ComponentEventRequestFilter>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

at.porscheinformatik.tapestry.csrfprotection - package at.porscheinformatik.tapestry.csrfprotection

This package contains the main classes of the cross-site request forgery protection which is provided as Tapestry 5 module, it offers different configuration modes that can be found in the module class CsrfProtectionModule.

at.porscheinformatik.tapestry.csrfprotection.components - package at.porscheinformatik.tapestry.csrfprotection.components

at.porscheinformatik.tapestry.csrfprotection.internal - package at.porscheinformatik.tapestry.csrfprotection.internal

Do not use classes in this package and sub-packages - these are internal and can me modified any time.

at.porscheinformatik.tapestry.csrfprotection.services - package at.porscheinformatik.tapestry.csrfprotection.services

Tapestry package for services and the module configuration.

B

bind(ServiceBinder) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

buildCsrfTokenRepository(ObjectLocator) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

C

checkToken(Request, HttpServletRequest) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager

This method performs the check of the token.

contributeComponentClassResolver(Configuration<LibraryMapping>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

contributeFactoryDefaults(MappedConfiguration<String, Object>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

CSRF_PROTECTION_MODE - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants

CSRF_TOKEN_PARAMETER_NAME - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants

CsrfComponentEventLinkTransformer - Class in at.porscheinformatik.tapestry.csrfprotection.internal

Adds CSRF token to all component event links.

CsrfComponentEventLinkTransformer(CsrfTokenManager, ProtectedPagesService, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer

CsrfConstants - Class in at.porscheinformatik.tapestry.csrfprotection

Constants for CSRF protection module.

CsrfException - Exception in at.porscheinformatik.tapestry.csrfprotection

This exception is thrown if a cross-site request forgery attack is detected.

CsrfException(String) - Constructor for exception at.porscheinformatik.tapestry.csrfprotection.CsrfException

CsrfHidden - Class in at.porscheinformatik.tapestry.csrfprotection.components

Hidden field containing the CSRF token to integrate with other frameworks (e.g.

CsrfHidden() - Constructor for class at.porscheinformatik.tapestry.csrfprotection.components.CsrfHidden

CsrfLinkTransformerDecorator - Class in at.porscheinformatik.tapestry.csrfprotection.internal

Decorator LinkTransformer calling CsrfComponentEventLinkTransformer to modify event links.

CsrfLinkTransformerDecorator(ComponentEventLinkTransformer, LinkTransformer) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator

CsrfProtectionFilter - Class in at.porscheinformatik.tapestry.csrfprotection.internal

This filter checks each component event request or page render request for cross-site request forgery attacks.

CsrfProtectionFilter(CsrfTokenManager, ProtectedPagesService, Request, HttpServletRequest) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfProtectionFilter

Creates a new filter and injects the required services and configuration parameters.

CsrfProtectionMode - Enum in at.porscheinformatik.tapestry.csrfprotection

Modes for CSRF protections

CsrfProtectionModule - Class in at.porscheinformatik.tapestry.csrfprotection.services

IoC module for Tapestry CSRF Protection.

CsrfProtectionModule() - Constructor for class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

CsrfToken - Interface in at.porscheinformatik.tapestry.csrfprotection

Provides the information about an expected CSRF token.

CsrfTokenManager - Class in at.porscheinformatik.tapestry.csrfprotection.internal

This class contains the logic to create a secure token for cross-site script request forgery protection.

CsrfTokenManager(CsrfTokenRepository, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager

Initializes the secure token that will stay the same for the whole life cycle of this instance.

CsrfTokenRepository - Interface in at.porscheinformatik.tapestry.csrfprotection.services

Generates CSRF tokens.

D

decodeComponentEventRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer

decodeComponentEventRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator

decodePageRenderRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator

decorateLinkTransformer(Class<LinkTransformer>, LinkTransformer, String, ComponentEventLinkTransformer) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule

DEFAULT_CSRF_TOKEN_PARAMETER_NAME - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants

DefaultCsrfToken - Class in at.porscheinformatik.tapestry.csrfprotection.internal

Default CsrfToken implementation.

DefaultCsrfToken(String, String, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken

Creates a new instance.

G

generateToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository

generateToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository

generateToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository

getClientId() - Method in class at.porscheinformatik.tapestry.csrfprotection.components.CsrfHidden

getHeaderName() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken

Gets the HTTP header that the CSRF is populated on the response and can be placed on requests instead of the parameter.

getHeaderName() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken

getParameterName() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken

Gets the HTTP parameter name that should contain the token.

getParameterName() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken

getSessionToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager

Returns the token stored in this instance.

getSpringBean(ObjectLocator, String) - Static method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringContextHelper

Looks up Spring's ApplicationContext and gets bean.

getToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken

Gets the token value.

getToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken

H

handle(ComponentEventRequestParameters, ComponentEventRequestHandler) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfProtectionFilter

Handles a component event request and evaluates the cross-site request forgery protection.

I

InheritedNotCsrfProtected - Annotation Type in at.porscheinformatik.tapestry.csrfprotection

This annotation can be used to mark page classes.

isPageProtected(ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.ProtectedPagesService

L

loadToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository

loadToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository

loadToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository

Loads the expected CsrfToken from the HttpServletRequest

N

NotCsrfProtected - Annotation Type in at.porscheinformatik.tapestry.csrfprotection

This annotation can be used to mark page classes.

P

ProtectedPagesService - Class in at.porscheinformatik.tapestry.csrfprotection.internal

Service that provides information which pages are protected.

ProtectedPagesService(ComponentClassResolver, CsrfProtectionMode) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.ProtectedPagesService

S

saveToken(CsrfToken) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository

saveToken(CsrfToken) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository

saveToken(CsrfToken) - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository

Saves the CsrfToken using the HttpServletRequest and HttpServletResponse.

SessionCsrfTokenRepository - Class in at.porscheinformatik.tapestry.csrfprotection.internal

A CsrfTokenRepository that stores the CsrfToken in the HTTP session.

SessionCsrfTokenRepository(ApplicationStateManager) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository

SpringContextHelper - Class in at.porscheinformatik.tapestry.csrfprotection.internal

Util class for getting Spring beans.

SpringCsrfTokenRepository - Class in at.porscheinformatik.tapestry.csrfprotection.internal

A delegate to Spring's CsrfTokenRepository.

SpringCsrfTokenRepository(CsrfTokenRepository, HttpServletRequest, HttpServletResponse) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository

T

transformComponentEventLink(Link, ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer

transformComponentEventLink(Link, ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator

transformPageRenderLink(Link, PageRenderRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator

V

valueOf(String) - Static method in enum at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode

Returns the enum constant of this type with the specified name.

values() - Static method in enum at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode

Returns an array containing the constants of this enum type, in the order they are declared.

A B C D G H I L N P S T V