public interface XsrfTokenGenerator
Modifier and Type | Field and Description |
---|---|
static String |
TOKEN_HTTP_SESSION_KEY
The name of the XSRF token put ino the HTTP session
|
static String |
TOKEN_WEB_PARAMETER_KEY
The name of the XSRF token parameter sent in on a web request
|
Modifier and Type | Method and Description |
---|---|
boolean |
generatedByAuthenticatedUser(String token)
This returns true of the token was generated by an authenticated user
|
String |
generateToken()
Gets the token from the current request, generating a new one if none is found
|
String |
generateToken(boolean create)
Gets the token from the current request, optionally generating a new one if none is found
|
String |
generateToken(javax.servlet.http.HttpServletRequest request)
Gets the token from the current request, generating a new one if none is found
|
String |
generateToken(javax.servlet.http.HttpServletRequest request,
boolean create)
Gets the token from the current request, optionally generating a new one if none is found
|
String |
getToken(javax.servlet.http.HttpServletRequest request)
Gets the token from the current request, generating a new one if none is found
|
String |
getXsrfTokenName()
Convenience method which will return the name to be used for a supplied XsrfToken in a request.
|
boolean |
validateToken(javax.servlet.http.HttpServletRequest request,
String token)
Validate a form token received as part of a web request
|
static final String TOKEN_HTTP_SESSION_KEY
static final String TOKEN_WEB_PARAMETER_KEY
String generateToken()
String generateToken(boolean create)
create
- true to create token if none is foundString generateToken(javax.servlet.http.HttpServletRequest request)
request
- the request the token is being generated forString generateToken(javax.servlet.http.HttpServletRequest request, boolean create)
request
- the request the token is being generated forcreate
- true to create token if none is foundString getToken(javax.servlet.http.HttpServletRequest request)
request
- request that contains the form token.String getXsrfTokenName()
boolean validateToken(javax.servlet.http.HttpServletRequest request, String token)
request
- the request the token was received intoken
- the tokenboolean generatedByAuthenticatedUser(String token)
token
- the XSRF token in questionCopyright © 2002-2015 Atlassian. All Rights Reserved.