Package at.porscheinformatik.tapestry.csrfprotection.internal

Class CsrfComponentEventLinkTransformer

java.lang.Object

at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer

All Implemented Interfaces:

org.apache.tapestry5.services.linktransform.ComponentEventLinkTransformer

public class CsrfComponentEventLinkTransformer
extends Object
implements org.apache.tapestry5.services.linktransform.ComponentEventLinkTransformer

Adds CSRF token to all component event links.

Constructor Summary

Constructors

Constructor	Description
CsrfComponentEventLinkTransformer(CsrfTokenManager csrfTokenProvider, ProtectedPagesService protectedPagesService, String parameterName)

Method Summary

Modifier and Type	Method	Description
org.apache.tapestry5.services.ComponentEventRequestParameters	decodeComponentEventRequest(org.apache.tapestry5.http.services.Request request)
org.apache.tapestry5.http.Link	transformComponentEventLink(org.apache.tapestry5.http.Link defaultLink, org.apache.tapestry5.services.ComponentEventRequestParameters parameters)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

CsrfComponentEventLinkTransformer

public CsrfComponentEventLinkTransformer(CsrfTokenManager csrfTokenProvider,
 ProtectedPagesService protectedPagesService,
 @Symbol("tapestry.csrf-token-parameter-name")
 String parameterName)

Parameters:

csrfTokenProvider - .

protectedPagesService - .

parameterName - symbol CsrfConstants.CSRF_TOKEN_PARAMETER_NAME

Method Details

transformComponentEventLink

public org.apache.tapestry5.http.Link transformComponentEventLink(org.apache.tapestry5.http.Link defaultLink,
 org.apache.tapestry5.services.ComponentEventRequestParameters parameters)

Specified by:

transformComponentEventLink in interface org.apache.tapestry5.services.linktransform.ComponentEventLinkTransformer

decodeComponentEventRequest

public org.apache.tapestry5.services.ComponentEventRequestParameters decodeComponentEventRequest(org.apache.tapestry5.http.services.Request request)

Specified by:

decodeComponentEventRequest in interface org.apache.tapestry5.services.linktransform.ComponentEventLinkTransformer