at.porscheinformatik.tapestry.csrfprotection.internal

Class SessionCsrfTokenRepository

java.lang.Object

at.porscheinformatik.tapestry.csrfprotection.internal.SessionCsrfTokenRepository

All Implemented Interfaces:

CsrfTokenRepository

public class SessionCsrfTokenRepository
extends Object
implements CsrfTokenRepository

A CsrfTokenRepository that stores the CsrfToken in the HTTP session.

Constructor Summary

Constructors

Constructor and Description
SessionCsrfTokenRepository(org.apache.tapestry5.services.ApplicationStateManager applicationStateManager)

Method Summary

Modifier and Type	Method and Description
CsrfToken	generateToken()
CsrfToken	loadToken() Loads the expected CsrfToken from the HttpServletRequest
void	saveToken(CsrfToken token) Saves the CsrfToken using the HttpServletRequest and HttpServletResponse.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionCsrfTokenRepository

public SessionCsrfTokenRepository(org.apache.tapestry5.services.ApplicationStateManager applicationStateManager)

Parameters:

applicationStateManager - .

Method Detail

generateToken

public CsrfToken generateToken()

Specified by:

generateToken in interface CsrfTokenRepository

Returns:

a newly generated CSRF token

loadToken

public CsrfToken loadToken()

Description copied from interface: CsrfTokenRepository

Loads the expected CsrfToken from the HttpServletRequest

Specified by:

loadToken in interface CsrfTokenRepository

Returns:

the CsrfToken or null if none exists

saveToken

public void saveToken(CsrfToken token)

Description copied from interface: CsrfTokenRepository

Saves the CsrfToken using the HttpServletRequest and HttpServletResponse. If the CsrfToken is null, it is the same as deleting it.

Specified by:

saveToken in interface CsrfTokenRepository

Parameters:

token - the CsrfToken to save or null to delete