Index
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form
A
- addCsrfFilter(OrderedConfiguration<ComponentEventRequestFilter>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- at.porscheinformatik.tapestry.csrfprotection - package at.porscheinformatik.tapestry.csrfprotection
-
This package contains the main classes of the cross-site request forgery protection which is provided as Tapestry 5 module, it offers different configuration modes that can be found in the module class CsrfProtectionModule.
- at.porscheinformatik.tapestry.csrfprotection.components - package at.porscheinformatik.tapestry.csrfprotection.components
- at.porscheinformatik.tapestry.csrfprotection.internal - package at.porscheinformatik.tapestry.csrfprotection.internal
-
Do not use classes in this package and sub-packages - these are internal and can me modified any time.
- at.porscheinformatik.tapestry.csrfprotection.services - package at.porscheinformatik.tapestry.csrfprotection.services
-
Tapestry package for services and the module configuration.
- AUTO - Enum constant in enum class at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode
-
activate auto CSRF protection - for all pages and all components
B
- bind(ServiceBinder) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- buildCsrfTokenRepository(ObjectLocator) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
C
- checkToken(Request, HttpServletRequest) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager
-
This method performs the check of the token.
- contributeComponentClassResolver(Configuration<LibraryMapping>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- contributeFactoryDefaults(MappedConfiguration<String, Object>) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- CSRF_PROTECTION_MODE - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants
- CSRF_TOKEN_PARAMETER_NAME - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants
- CsrfComponentEventLinkTransformer - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
Adds CSRF token to all component event links.
- CsrfComponentEventLinkTransformer(CsrfTokenManager, ProtectedPagesService, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer
- CsrfConstants - Class in at.porscheinformatik.tapestry.csrfprotection
-
Constants for CSRF protection module.
- CsrfException - Exception in at.porscheinformatik.tapestry.csrfprotection
-
This exception is thrown if a cross-site request forgery attack is detected.
- CsrfException(String) - Constructor for exception at.porscheinformatik.tapestry.csrfprotection.CsrfException
- CsrfHidden - Class in at.porscheinformatik.tapestry.csrfprotection.components
-
Hidden field containing the CSRF token to integrate with other frameworks (e.g.
- CsrfHidden() - Constructor for class at.porscheinformatik.tapestry.csrfprotection.components.CsrfHidden
- CsrfLinkTransformerDecorator - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
Decorator
LinkTransformercallingCsrfComponentEventLinkTransformerto modify event links. - CsrfLinkTransformerDecorator(ComponentEventLinkTransformer, LinkTransformer) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator
- CsrfProtectionFilter - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
This filter checks each component event request or page render request for cross-site request forgery attacks.
- CsrfProtectionFilter(CsrfTokenManager, ProtectedPagesService, Request, HttpServletRequest) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfProtectionFilter
-
Creates a new filter and injects the required services and configuration parameters.
- CsrfProtectionMode - Enum Class in at.porscheinformatik.tapestry.csrfprotection
-
Modes for CSRF protections
- CsrfProtectionModule - Class in at.porscheinformatik.tapestry.csrfprotection.services
-
IoC module for Tapestry CSRF Protection.
- CsrfProtectionModule() - Constructor for class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- CsrfToken - Interface in at.porscheinformatik.tapestry.csrfprotection
-
Provides the information about an expected CSRF token.
- CsrfTokenManager - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
This class contains the logic to create a secure token for cross-site script request forgery protection.
- CsrfTokenManager(CsrfTokenRepository, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager
-
Initializes the secure token that will stay the same for the whole life cycle of this instance.
- CsrfTokenRepository - Interface in at.porscheinformatik.tapestry.csrfprotection.services
-
Generates CSRF tokens.
D
- decodeComponentEventRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer
- decodeComponentEventRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator
- decodePageRenderRequest(Request) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator
- decorateLinkTransformer(Class<LinkTransformer>, LinkTransformer, String, ComponentEventLinkTransformer) - Static method in class at.porscheinformatik.tapestry.csrfprotection.services.CsrfProtectionModule
- DEFAULT_CSRF_TOKEN_PARAMETER_NAME - Static variable in class at.porscheinformatik.tapestry.csrfprotection.CsrfConstants
- DefaultCsrfToken - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
Default
CsrfTokenimplementation. - DefaultCsrfToken(String, String, String) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken
-
Creates a new instance.
G
- generateToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository
- generateToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository
- generateToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository
- getClientId() - Method in class at.porscheinformatik.tapestry.csrfprotection.components.CsrfHidden
- getHeaderName() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken
-
Gets the HTTP header that the CSRF is populated on the response and can be placed on requests instead of the parameter.
- getHeaderName() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken
- getParameterName() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken
-
Gets the HTTP parameter name that should contain the token.
- getParameterName() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken
- getSessionToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfTokenManager
-
Returns the token stored in this instance.
- getSpringBean(ObjectLocator, String) - Static method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringContextHelper
-
Looks up Spring's
ApplicationContextand gets bean. - getToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.CsrfToken
-
Gets the token value.
- getToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.DefaultCsrfToken
H
- handle(ComponentEventRequestParameters, ComponentEventRequestHandler) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfProtectionFilter
-
Handles a component event request and evaluates the cross-site request forgery protection.
I
- InheritedNotCsrfProtected - Annotation Interface in at.porscheinformatik.tapestry.csrfprotection
-
This annotation can be used to mark page classes.
- isPageProtected(ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.ProtectedPagesService
L
- loadToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository
- loadToken() - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository
- loadToken() - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository
-
Loads the expected
CsrfTokenfrom theHttpServletRequest
N
- NotCsrfProtected - Annotation Interface in at.porscheinformatik.tapestry.csrfprotection
-
This annotation can be used to mark page classes.
O
- OFF - Enum constant in enum class at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode
-
turn CSRF protection off - for all pages and all components
P
- ProtectedPagesService - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
Service that provides information which pages are protected.
- ProtectedPagesService(ComponentClassResolver, CsrfProtectionMode) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.ProtectedPagesService
S
- saveToken(CsrfToken) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository
- saveToken(CsrfToken) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository
- saveToken(CsrfToken) - Method in interface at.porscheinformatik.tapestry.csrfprotection.services.CsrfTokenRepository
- SessionCsrfTokenRepository - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
A
CsrfTokenRepositorythat stores theCsrfTokenin the HTTP session. - SessionCsrfTokenRepository(ApplicationStateManager) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository
- SpringContextHelper - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
Util class for getting Spring beans.
- SpringCsrfTokenRepository - Class in at.porscheinformatik.tapestry.csrfprotection.internal
-
A delegate to Spring's
CsrfTokenRepository. - SpringCsrfTokenRepository(CsrfTokenRepository, HttpServletRequest, HttpServletResponse) - Constructor for class at.porscheinformatik.tapestry.csrfprotection.internal.SpringCsrfTokenRepository
T
- transformComponentEventLink(Link, ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfComponentEventLinkTransformer
- transformComponentEventLink(Link, ComponentEventRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator
- transformPageRenderLink(Link, PageRenderRequestParameters) - Method in class at.porscheinformatik.tapestry.csrfprotection.internal.CsrfLinkTransformerDecorator
V
- valueOf(String) - Static method in enum class at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode
-
Returns the enum constant of this class with the specified name.
- values() - Static method in enum class at.porscheinformatik.tapestry.csrfprotection.CsrfProtectionMode
-
Returns an array containing the constants of this enum class, in the order they are declared.
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form