org.springframework.security.web.servlet.support.csrf

Class CsrfRequestDataValueProcessor

java.lang.Object

org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

All Implemented Interfaces:

org.springframework.web.servlet.support.RequestDataValueProcessor

public final class CsrfRequestDataValueProcessor
extends Object
implements org.springframework.web.servlet.support.RequestDataValueProcessor

Integration with Spring Web MVC that automatically adds the CsrfToken into forms with hidden inputs when using Spring tag libraries.

Since:

3.2

Author:

Rob Winch

Constructor Summary

Constructors

Constructor and Description
CsrfRequestDataValueProcessor()

Method Summary

Modifier and Type	Method and Description
Map<String,String>	getExtraHiddenFields(javax.servlet.http.HttpServletRequest request)
String	processAction(javax.servlet.http.HttpServletRequest request, String action)
String	processAction(javax.servlet.http.HttpServletRequest request, String action, String method)
String	processFormFieldValue(javax.servlet.http.HttpServletRequest request, String name, String value, String type)
String	processUrl(javax.servlet.http.HttpServletRequest request, String url)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CsrfRequestDataValueProcessor

public CsrfRequestDataValueProcessor()

Method Detail

processAction

public String processAction(javax.servlet.http.HttpServletRequest request,
                            String action)

Specified by:

processAction in interface org.springframework.web.servlet.support.RequestDataValueProcessor

processAction

public String processAction(javax.servlet.http.HttpServletRequest request,
                            String action,
                            String method)

processFormFieldValue

public String processFormFieldValue(javax.servlet.http.HttpServletRequest request,
                                    String name,
                                    String value,
                                    String type)

Specified by:

processFormFieldValue in interface org.springframework.web.servlet.support.RequestDataValueProcessor

getExtraHiddenFields

public Map<String,String> getExtraHiddenFields(javax.servlet.http.HttpServletRequest request)

Specified by:

getExtraHiddenFields in interface org.springframework.web.servlet.support.RequestDataValueProcessor

processUrl

public String processUrl(javax.servlet.http.HttpServletRequest request,
                         String url)

Specified by:

processUrl in interface org.springframework.web.servlet.support.RequestDataValueProcessor