package com.atlassian.sal.core.csrf;
   
   import com.atlassian.sal.api.xsrf.XsrfHeaderValidator;
   import com.atlassian.sal.api.xsrf.XsrfTokenValidator;
   
   import javax.servlet.http.HttpServletRequest;
   
   /**
    * Provides an implementation of checking if a request
   * contains either a valid csrf token or a
   * valid csrf header {@link XsrfHeaderValidator#TOKEN_HEADER}.
   * @since v2.10.13
   */
  public class CsrfRequestValidator
  {
      private static final XsrfHeaderValidator headerValidator =
          new XsrfHeaderValidator();
      private final XsrfTokenValidator tokenValidator;
  
      public CsrfRequestValidator(XsrfTokenValidator tokenValidator)
      {
          this.tokenValidator = tokenValidator;
      }
  
      /**
       * Returns true iff the given request has a valid csrf token or a
       * valid csrf header.
       * @param request the request to check.
       * @return true iff the given request has a valid csrf token or a
       * valid csrf header.
       */
      public boolean validateRequestPassesXsrfChecks(HttpServletRequest request)
      {
          return headerValidator.requestHasValidXsrfHeader(request) ||
              tokenValidator.validateFormEncodedToken(request);
      }
  }