Interface XsrfTokenValidationManager
-
- All Known Implementing Classes:
DefaultXsrfTokenValidationManager
public interface XsrfTokenValidationManager
Validates the XSRF tokens for protected struts actions Used in NeoSecurityFilter SeeDefaultXsrfTokenValidationManager
for further documentation.
-
-
Method Summary
All Methods Instance Methods Abstract Methods Modifier and Type Method Description boolean
isRequestExempt(String actionName, javax.servlet.http.HttpServletRequest request)
Check if XSRF token protection checks should be exempt for the given action and request.boolean
isRequestValid(Class<?> actionClass, Method actionMethod, Map<String,String> actionParams, javax.servlet.http.HttpServletRequest request)
Check if this request passes XSRF token checks.
-
-
-
Method Detail
-
isRequestExempt
boolean isRequestExempt(String actionName, javax.servlet.http.HttpServletRequest request)
Check if XSRF token protection checks should be exempt for the given action and request.- Parameters:
actionName
- - the action namerequest
- - the currentHttpServletRequest
- Returns:
- true if the request should be exempt from xsrf check, false otherwise.
-
isRequestValid
boolean isRequestValid(Class<?> actionClass, Method actionMethod, Map<String,String> actionParams, javax.servlet.http.HttpServletRequest request)
Check if this request passes XSRF token checks.- Parameters:
actionClass
- - the current action classactionMethod
- - the action method that is executedactionParams
- - the action parametersrequest
- - the currentHttpServletRequest
- Returns:
- true if the request passes XSRF token validations, false otherwise.
-
-