Package sk.iway.iwcm.system.stripes

Class CSRF

java.lang.Object
sk.iway.iwcm.system.stripes.CSRF
public class CSRF extends Object
CSRF.java - trieda pre zakladnu ochranu pred CSRF utokmi

  • Constructor Summary

    Constructors
    Constructor
    Description
    CSRF()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    static String
    getCsrfToken(javax.servlet.http.HttpSession session, boolean saveToSession)
    Vrati CSRF token pre vlozenie do formularu
    static String
    getCsrfTokenInputFiled(javax.servlet.http.HttpSession session)
    Vrati CSRF input field ktory sa vlozi do formularu
    static String
    getCsrfTokenInputFiled(javax.servlet.http.HttpSession session, boolean saveToSession)
    Vrati CSRF input field ktory sa vlozi do formularu
    static String
    getCSRFTokenQuery(javax.servlet.http.HttpSession session, boolean saveToSession)
    Vrati meno parametra aj s CSRF tokenom pre vlozenie do url ako parameter
    static String
    getParameterName()
    Returns CSRF token parameter name
    static boolean
    verifyTokenAjax(javax.servlet.http.HttpServletRequest request)
    Verifikuje token v session, pouzit "iba" pri Ajax-ovych volaniach, Token sa nemaze po pouziti.
    static boolean
    verifyTokenAjax(javax.servlet.http.HttpSession session, String tokenValue)
    Verifikuje token v session, pouzit "iba" pri Ajax-ovych volaniach, Token sa nemaze po pouziti.
    static boolean
    verifyTokenAndDeleteIt(javax.servlet.http.HttpServletRequest request)
    Verifikuje a nasledne zmaze aby sa znova nedal pouzit token v session
    static boolean
    verifyTokenAndDeleteIt(javax.servlet.http.HttpSession session, String tokenValue)
    Verifikuje a nasledne zmaze aby sa znova nedal pouzit token v session
    static void
    writeCsrfTokenInputFiled(javax.servlet.http.HttpSession session, javax.servlet.jsp.JspWriter out)
    Zapise input pole do formularu, vola sa priamo vo FormTag

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • CSRF

      public CSRF()

  • Method Details

    • writeCsrfTokenInputFiled

      public static void writeCsrfTokenInputFiled(javax.servlet.http.HttpSession session, javax.servlet.jsp.JspWriter out)
      Zapise input pole do formularu, vola sa priamo vo FormTag
      Parameters:
      session -
      out -

    • getCsrfTokenInputFiled

      public static String getCsrfTokenInputFiled(javax.servlet.http.HttpSession session)
      Vrati CSRF input field ktory sa vlozi do formularu
      Parameters:
      session -
      Returns:

    • getCsrfTokenInputFiled

      public static String getCsrfTokenInputFiled(javax.servlet.http.HttpSession session, boolean saveToSession)
      Vrati CSRF input field ktory sa vlozi do formularu
      Parameters:
      session -
      saveToSession - - ak je true, aj sa ulozi na verifikaciu, false sa pouziva pre obfuscovanu verziu pre boty vo WriteTagu
      Returns:

    • getCsrfToken

      public static String getCsrfToken(javax.servlet.http.HttpSession session, boolean saveToSession)
      Vrati CSRF token pre vlozenie do formularu
      Parameters:
      session -
      saveToSession -
      Returns:

    • verifyTokenAndDeleteIt

      public static boolean verifyTokenAndDeleteIt(javax.servlet.http.HttpServletRequest request)
      Verifikuje a nasledne zmaze aby sa znova nedal pouzit token v session
      Parameters:
      request -
      Returns:

    • verifyTokenAndDeleteIt

      public static boolean verifyTokenAndDeleteIt(javax.servlet.http.HttpSession session, String tokenValue)
      Verifikuje a nasledne zmaze aby sa znova nedal pouzit token v session
      Parameters:
      session -
      tokenValue - - CSRF token
      Returns:

    • verifyTokenAjax

      public static boolean verifyTokenAjax(javax.servlet.http.HttpServletRequest request)
      Verifikuje token v session, pouzit "iba" pri Ajax-ovych volaniach, Token sa nemaze po pouziti.
      Parameters:
      request -
      Returns:

    • verifyTokenAjax

      public static boolean verifyTokenAjax(javax.servlet.http.HttpSession session, String tokenValue)
      Verifikuje token v session, pouzit "iba" pri Ajax-ovych volaniach, Token sa nemaze po pouziti.
      Parameters:
      session -
      tokenValue - - hodnota tokenu
      Returns:

    • getCSRFTokenQuery

      public static String getCSRFTokenQuery(javax.servlet.http.HttpSession session, boolean saveToSession)
      Vrati meno parametra aj s CSRF tokenom pre vlozenie do url ako parameter
      Parameters:
      session -
      saveToSession -
      Returns:

    • getParameterName

      public static String getParameterName()
      Returns CSRF token parameter name
      Returns: