de.hybris.platform.ychinaaccelerator.storefront.util

Class CSRFTokenManager

java.lang.Object

de.hybris.platform.ychinaaccelerator.storefront.util.CSRFTokenManager

public final class CSRFTokenManager
extends java.lang.Object

This class manages the CSRF token for either a given session or request.

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	CSRF_PARAM_NAME

Method Summary

Modifier and Type	Method and Description
protected static java.lang.String	generateToken() Generates a new token.
static java.lang.String	getTokenForSession(HttpSession httpSession) Returns the CSRF token for the provided httpSession.
static java.lang.String	getTokenFromRequest(HttpServletRequest httpServletRequest) Returns the CSRF token from the httpServletRequest.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CSRF_PARAM_NAME

public static final java.lang.String CSRF_PARAM_NAME

See Also:

Constant Field Values

Method Detail

getTokenFromRequest

public static java.lang.String getTokenFromRequest(HttpServletRequest httpServletRequest)

Returns the CSRF token from the httpServletRequest.

Parameters:

httpServletRequest - the httpServletRequest to retrieve CSRF token from

Returns:

the CSRF token

generateToken

protected static java.lang.String generateToken()

Generates a new token.

Returns:

The new token.

getTokenForSession

public static java.lang.String getTokenForSession(HttpSession httpSession)

Returns the CSRF token for the provided httpSession.

Parameters:

httpSession -

Returns:

the CSRF token