cn.aotcloud.security.oncetoken.support

类 DefaultRequestTokenHandler

java.lang.Object

cn.aotcloud.security.oncetoken.support.DefaultRequestTokenHandler

所有已实现的接口:

RequestTokenHandler, org.springframework.beans.factory.Aware, org.springframework.context.ApplicationEventPublisherAware

public class DefaultRequestTokenHandler
extends Object
implements RequestTokenHandler, org.springframework.context.ApplicationEventPublisherAware

基于Timestamp和Nonce的方案。

作者:

xkxu https://blog.csdn.net/koastal/article/details/53456696

构造器概要

构造器

构造器和说明
DefaultRequestTokenHandler(RequestTokenStore requestTokenStore, RequestTokenValidator requestTokenValidator, boolean requestTokenEnabled, List<String> urls)

方法概要

限定符和类型	方法和说明
protected boolean	matchRequest(javax.servlet.http.HttpServletRequest request)
protected RequestToken	parseRequestToken(javax.servlet.http.HttpServletRequest request)
void	setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)
boolean	support(javax.servlet.http.HttpServletRequest request)
void	validate(javax.servlet.http.HttpServletRequest request) 检查防重放请求令牌

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

DefaultRequestTokenHandler

public DefaultRequestTokenHandler(RequestTokenStore requestTokenStore,
                                  RequestTokenValidator requestTokenValidator,
                                  boolean requestTokenEnabled,
                                  List<String> urls)

方法详细资料

setApplicationEventPublisher

public void setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

指定者:

setApplicationEventPublisher 在接口中 org.springframework.context.ApplicationEventPublisherAware

support

public boolean support(javax.servlet.http.HttpServletRequest request)

matchRequest

protected boolean matchRequest(javax.servlet.http.HttpServletRequest request)

validate

public void validate(javax.servlet.http.HttpServletRequest request)
              throws IllegalRequestTokenException

从接口复制的说明: RequestTokenHandler

检查防重放请求令牌

指定者:

validate 在接口中 RequestTokenHandler

抛出:

IllegalRequestTokenException - 检查到请求是重发攻击，抛出异常。

parseRequestToken

protected RequestToken parseRequestToken(javax.servlet.http.HttpServletRequest request)