Class KeyInSessionSunJceCryptFactory

  • All Implemented Interfaces:
    org.apache.wicket.util.crypt.ICryptFactory

    public class KeyInSessionSunJceCryptFactory
    extends Object
    implements org.apache.wicket.util.crypt.ICryptFactory
    Crypt factory that produces SunJceCrypt instances based on session-specific encryption key. This allows each user to have his own encryption key, hardening against CSRF attacks.
    Note that the use of this crypt factory will result in an immediate creation of a session.
    Author:
    igor.vaynberg
    • Constructor Detail

      • KeyInSessionSunJceCryptFactory

        public KeyInSessionSunJceCryptFactory()
        Constructor using Cipher "PBEWithMD5AndDES"
      • KeyInSessionSunJceCryptFactory

        public KeyInSessionSunJceCryptFactory​(String cryptMethod)
        Constructor that uses a custom Cipher
        Parameters:
        cryptMethod - the name of the crypt method (cipher)
    • Method Detail

      • newCrypt

        public org.apache.wicket.util.crypt.ICrypt newCrypt()
        Specified by:
        newCrypt in interface org.apache.wicket.util.crypt.ICryptFactory
      • createCrypt

        protected org.apache.wicket.util.crypt.ICrypt createCrypt()
        Returns:
        the ICrypt to use