org.apache.wicket.core.request.mapper

Class CryptoMapper

java.lang.Object

org.apache.wicket.core.request.mapper.CryptoMapper

All Implemented Interfaces:

IRequestMapper

public class CryptoMapper
extends Object
implements IRequestMapper

Request mapper that encrypts urls generated by another mapper. The original URL (both segments and parameters) is encrypted and is represented as URL segment. To be able to handle relative URLs for images in .css file the same amount of URL segments that the original URL had are appended to the encrypted URL. Each segment has a precise 5 character value, calculated using a checksum. This helps in calculating the relative distance from the original URL. When a URL is returned by the browser, we iterate through these checksummed placeholder URL segments. If the segment matches the expected checksum, then the segment it deemed to be the corresponding segment in the encrypted URL. If the segment does not match the expected checksum, then the segment is deemed a plain text sibling of the corresponding segment in the encrypted URL, and all subsequent segments are considered plain text children of the current segment.

Author:

igor.vaynberg, Jesse Long, svenmeier

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	CryptoMapper.HashedSegmentGenerator A generator of hashed segments.

Constructor Summary

Constructors

Constructor and Description
CryptoMapper(IRequestMapper wrappedMapper, Application application) Encrypt with SecuritySettings.getCryptFactory().
CryptoMapper(IRequestMapper wrappedMapper, IProvider<ICrypt> cryptProvider) Construct.

Method Summary

Methods

Modifier and Type	Method and Description
protected Url	decryptUrl(Request request, Url encryptedUrl)
protected Url	encryptUrl(Url url)
int	getCompatibilityScore(Request request)
protected ICrypt	getCrypt()
protected IRequestMapper	getWrappedMapper()
Url	mapHandler(IRequestHandler requestHandler)
IRequestHandler	mapRequest(Request request)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CryptoMapper

public CryptoMapper(IRequestMapper wrappedMapper,
            Application application)

Encrypt with SecuritySettings.getCryptFactory().

Note: Encryption is done with SecuritySettings.DEFAULT_ENCRYPTION_KEY if you haven't configured an alternative ICryptFactory. Alternatively use CryptoMapper(IRequestMapper, IProvider) with a specific ICrypt.

Parameters:

wrappedMapper - the non-crypted request mapper

application - the current application

CryptoMapper

public CryptoMapper(IRequestMapper wrappedMapper,
            IProvider<ICrypt> cryptProvider)

Construct.

Parameters:

wrappedMapper - the non-crypted request mapper

cryptProvider - the custom crypt provider

Method Detail

getCompatibilityScore

public int getCompatibilityScore(Request request)

Specified by:

getCompatibilityScore in interface IRequestMapper

mapHandler

public Url mapHandler(IRequestHandler requestHandler)

Specified by:

mapHandler in interface IRequestMapper

mapRequest

public IRequestHandler mapRequest(Request request)

Specified by:

mapRequest in interface IRequestMapper

getCrypt

protected final ICrypt getCrypt()

Returns:

the ICrypt implementation that may be used to encrypt/decrypt Url's segments and/or query string

getWrappedMapper

protected final IRequestMapper getWrappedMapper()

Returns:

the wrapped root request mapper

encryptUrl

protected Url encryptUrl(Url url)

decryptUrl

protected Url decryptUrl(Request request,
             Url encryptedUrl)