act.security

Class CSRF.Spec

java.lang.Object

act.security.CSRF.Spec

Enclosing class:

CSRF

public static class CSRF.Spec
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
static CSRF.Spec	DEFAULT
static CSRF.Spec	DUMB

Method Summary

Modifier and Type	Method and Description
CSRF.Spec	chain(CSRF.Spec next)
void	check(ActionContext context, org.osgl.http.H.Session session) Check CSRF token after session resolved
void	preCheck(ActionContext context) Do sanity check to see if CSRF token is present.
void	setCookieAndRenderArgs(ActionContext context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DUMB

public static final CSRF.Spec DUMB

DEFAULT

public static final CSRF.Spec DEFAULT

Method Detail

preCheck

public void preCheck(ActionContext context)

Do sanity check to see if CSRF token is present. This method is called before session resolved

Parameters:

context - the current context

check

public void check(ActionContext context,
                  org.osgl.http.H.Session session)

Check CSRF token after session resolved

Parameters:

context - the current context

chain

public CSRF.Spec chain(CSRF.Spec next)

setCookieAndRenderArgs

public void setCookieAndRenderArgs(ActionContext context)