org.apache.nifi.web.security.csrf

Class StandardCookieCsrfTokenRepository.CsrfApplicationCookieService

java.lang.Object

org.apache.nifi.web.security.cookie.StandardApplicationCookieService

org.apache.nifi.web.security.csrf.StandardCookieCsrfTokenRepository.CsrfApplicationCookieService

All Implemented Interfaces:

ApplicationCookieService

Enclosing class:

StandardCookieCsrfTokenRepository

private static class StandardCookieCsrfTokenRepository.CsrfApplicationCookieService
extends StandardApplicationCookieService

Field Summary

Fields

Modifier and Type	Field and Description
private static boolean	HTTP_ONLY_DISABLED

Constructor Summary

Constructors

Modifier	Constructor and Description
private	CsrfApplicationCookieService()

Method Summary

Modifier and Type	Method and Description
protected org.springframework.http.ResponseCookie.ResponseCookieBuilder	getCookieBuilder(URI resourceUri, ApplicationCookieName applicationCookieName, String value, Duration maxAge) Get Response Cookie Builder with HttpOnly disabled allowing JavaScript to read value for subsequent requests

Methods inherited from class org.apache.nifi.web.security.cookie.StandardApplicationCookieService

addCookie, addSessionCookie, getCookieValue, removeCookie

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

HTTP_ONLY_DISABLED

private static final boolean HTTP_ONLY_DISABLED

See Also:

Constant Field Values

Constructor Detail

CsrfApplicationCookieService

private CsrfApplicationCookieService()

Method Detail

getCookieBuilder

protected org.springframework.http.ResponseCookie.ResponseCookieBuilder getCookieBuilder(URI resourceUri,
                                                                                         ApplicationCookieName applicationCookieName,
                                                                                         String value,
                                                                                         Duration maxAge)

Get Response Cookie Builder with HttpOnly disabled allowing JavaScript to read value for subsequent requests

Overrides:

getCookieBuilder in class StandardApplicationCookieService

Parameters:

resourceUri - Resource URI containing path and domain

applicationCookieName - Application Cookie Name to be used

value - Cookie value

maxAge - Max Age

Returns:

Response Cookie Builder