Package org.apache.nifi.web.security.csrf

Class StandardCookieCsrfTokenRepository.CsrfApplicationCookieService

java.lang.Object

org.apache.nifi.web.security.cookie.StandardApplicationCookieService

org.apache.nifi.web.security.csrf.StandardCookieCsrfTokenRepository.CsrfApplicationCookieService

All Implemented Interfaces:

ApplicationCookieService

Enclosing class:

StandardCookieCsrfTokenRepository

private static class StandardCookieCsrfTokenRepository.CsrfApplicationCookieService
extends StandardApplicationCookieService

Field Summary

Fields

Modifier and Type	Field	Description
private static final boolean	HTTP_ONLY_DISABLED

Constructor Summary

Constructors

Modifier	Constructor	Description
private	CsrfApplicationCookieService()

Method Summary

Modifier and Type	Method	Description
protected org.springframework.http.ResponseCookie.ResponseCookieBuilder	getCookieBuilder(URI resourceUri, ApplicationCookieName applicationCookieName, String value, Duration maxAge)	Get Response Cookie Builder with HttpOnly disabled allowing JavaScript to read value for subsequent requests

Methods inherited from class org.apache.nifi.web.security.cookie.StandardApplicationCookieService

addCookie, addSessionCookie, getCookieValue, removeCookie

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

HTTP_ONLY_DISABLED

private static final boolean HTTP_ONLY_DISABLED

See Also:

• Constant Field Values

Constructor Details

CsrfApplicationCookieService

private CsrfApplicationCookieService()

Method Details

getCookieBuilder

protected org.springframework.http.ResponseCookie.ResponseCookieBuilder getCookieBuilder(URI resourceUri,
 ApplicationCookieName applicationCookieName,
 String value,
 Duration maxAge)

Get Response Cookie Builder with HttpOnly disabled allowing JavaScript to read value for subsequent requests

Overrides:

getCookieBuilder in class StandardApplicationCookieService

Parameters:

resourceUri - Resource URI containing path and domain

applicationCookieName - Application Cookie Name to be used

value - Cookie value

maxAge - Max Age

Returns:

Response Cookie Builder