com.atlassian.sal.core.xsrf

Class IndependentXsrfTokenValidator

java.lang.Object

com.atlassian.sal.core.xsrf.IndependentXsrfTokenValidator

All Implemented Interfaces:

XsrfTokenValidator

public class IndependentXsrfTokenValidator
extends Object
implements XsrfTokenValidator

XSRF token validator that manages its own tokens, not using the underlying applications XSRF tokens

Since:

2.4

Field Summary

Fields

Modifier and Type	Field and Description
static String	XSRF_PARAM_NAME

Constructor Summary

Constructors

Constructor and Description
IndependentXsrfTokenValidator(XsrfTokenAccessor accessor)

Method Summary

Modifier and Type	Method and Description
String	getXsrfParameterName() Returns the name of the http parameter name that is used to store the xsrf token in the form.
boolean	validateFormEncodedToken(javax.servlet.http.HttpServletRequest request) Validate a form encoded token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

XSRF_PARAM_NAME

public static final String XSRF_PARAM_NAME

See Also:

Constant Field Values

Constructor Detail

IndependentXsrfTokenValidator

public IndependentXsrfTokenValidator(XsrfTokenAccessor accessor)

Method Detail

validateFormEncodedToken

public boolean validateFormEncodedToken(javax.servlet.http.HttpServletRequest request)

Description copied from interface: XsrfTokenValidator

Validate a form encoded token. Will first read the token from the cookie and then validate

Specified by:

validateFormEncodedToken in interface XsrfTokenValidator

Parameters:

request - the request that contains the token.

Returns:

true if the token in the request matches the one in the cookie

getXsrfParameterName

public String getXsrfParameterName()

Description copied from interface: XsrfTokenValidator

Returns the name of the http parameter name that is used to store the xsrf token in the form.

Specified by:

getXsrfParameterName in interface XsrfTokenValidator

Returns:

the name of the http parameter name