com.atlassian.sal.api.xsrf

Interface XsrfTokenAccessor

All Known Implementing Classes:

IndependentXsrfTokenAccessor

public interface XsrfTokenAccessor

Gives access to the applications XSRF tokens

Since:

2.4

Method Summary

Modifier and Type	Method and Description
String	getXsrfToken(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, boolean create) Get the persistent token for the given request, that is, the token stored in the users session or in a cookie, not the token submitted as part of a form.

Method Detail

getXsrfToken

String getXsrfToken(javax.servlet.http.HttpServletRequest request,
                    javax.servlet.http.HttpServletResponse response,
                    boolean create)

Get the persistent token for the given request, that is, the token stored in the users session or in a cookie, not the token submitted as part of a form.

Parameters:

request - The request to get the token from

response - The response to add the cookie to if necessary, can be null, if create is false.

create - Whether a new token should be created if there is none in the request. The new token should be persistent across subsequent requests, ie, added to the users session or a cookie.

Returns:

The token for the request, or null if no token was found and create was false