org.apache.wicket.core.util.crypt

Class KeyInSessionSunJceCryptFactory

java.lang.Object

org.apache.wicket.core.util.crypt.KeyInSessionSunJceCryptFactory

All Implemented Interfaces:

ICryptFactory

public class KeyInSessionSunJceCryptFactory
extends Object
implements ICryptFactory

Crypt factory that produces SunJceCrypt instances based on http session-specific encryption key. This allows each user to have their own encryption key, hardening against CSRF attacks. Note that the use of this crypt factory will result in an immediate creation of a http session

Author:

igor.vaynberg

Constructor Summary

Constructors

Constructor and Description
KeyInSessionSunJceCryptFactory()

Method Summary

Methods

Modifier and Type	Method and Description
ICrypt	newCrypt()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KeyInSessionSunJceCryptFactory

public KeyInSessionSunJceCryptFactory()

Method Detail

newCrypt

public ICrypt newCrypt()

Specified by:

newCrypt in interface ICryptFactory