sirius.web.http

Class CSRFHelper

java.lang.Object

sirius.web.http.CSRFHelper

public class CSRFHelper
extends Object

A helper class which manages CSRF security-tokens within the user session.

Field Summary

Fields

Modifier and Type	Field and Description
static String	CSRF_TOKEN Contains the parameter name of the CSRF token.

Constructor Summary

Constructors

Constructor and Description
CSRFHelper()

Method Summary

Modifier and Type	Method and Description
String	getCSRFToken(WebContext ctx) Returns the CSRF security-token of the current session.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CSRF_TOKEN

public static final String CSRF_TOKEN

Contains the parameter name of the CSRF token.

See Also:

Constant Field Values

Constructor Detail

CSRFHelper

public CSRFHelper()

Method Detail

getCSRFToken

public String getCSRFToken(WebContext ctx)

Returns the CSRF security-token of the current session. Internally recomputes the token if outdated.

Parameters:

ctx - the request to read the token from

Returns:

the CSRF security-token to protect sensitive links.