org.pac4j.core.authorization.authorizer.csrf

Class CsrfTokenGeneratorAuthorizer

java.lang.Object

org.pac4j.core.authorization.authorizer.csrf.CsrfTokenGeneratorAuthorizer

All Implemented Interfaces:

Authorizer<CommonProfile>

public class CsrfTokenGeneratorAuthorizer
extends java.lang.Object
implements Authorizer<CommonProfile>

Authorizer which creates a new CSRF token and adds it as a request attribute and as a cookie (AngularJS).

Since:

1.8.1

Author:

Jerome Leleu

Constructor Summary

Constructors

Constructor and Description
CsrfTokenGeneratorAuthorizer(CsrfTokenGenerator csrfTokenGenerator)

Method Summary

Modifier and Type	Method and Description
CsrfTokenGenerator	getCsrfTokenGenerator()
java.lang.String	getDomain()
java.lang.Boolean	getHttpOnly()
java.lang.String	getPath()
java.lang.Boolean	getSecure()
boolean	isAuthorized(WebContext context, java.util.List<CommonProfile> profiles) Checks if the user profiles and / or the current web context are authorized.
void	setCsrfTokenGenerator(CsrfTokenGenerator csrfTokenGenerator)
void	setDomain(java.lang.String domain)
void	setHttpOnly(java.lang.Boolean httpOnly)
void	setPath(java.lang.String path)
void	setSecure(java.lang.Boolean secure)
java.lang.String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

CsrfTokenGeneratorAuthorizer

public CsrfTokenGeneratorAuthorizer(CsrfTokenGenerator csrfTokenGenerator)

Method Detail

isAuthorized

public boolean isAuthorized(WebContext context,
                            java.util.List<CommonProfile> profiles)
                     throws HttpAction

Description copied from interface: Authorizer

Checks if the user profiles and / or the current web context are authorized.

Specified by:

isAuthorized in interface Authorizer<CommonProfile>

Parameters:

context - the web context

profiles - the user profiles

Returns:

if the access is authorized

Throws:

HttpAction - whether an additional HTTP action is required

getCsrfTokenGenerator

public CsrfTokenGenerator getCsrfTokenGenerator()

setCsrfTokenGenerator

public void setCsrfTokenGenerator(CsrfTokenGenerator csrfTokenGenerator)

getDomain

public java.lang.String getDomain()

setDomain

public void setDomain(java.lang.String domain)

getPath

public java.lang.String getPath()

setPath

public void setPath(java.lang.String path)

getHttpOnly

public java.lang.Boolean getHttpOnly()

setHttpOnly

public void setHttpOnly(java.lang.Boolean httpOnly)

getSecure

public java.lang.Boolean getSecure()

setSecure

public void setSecure(java.lang.Boolean secure)

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object