io.ktor.util

Interface NonceManager

All Known Implementing Classes:

AlwaysFailNonceManager, GenerateOnlyNonceManager, StatelessHmacNonceManager

public NonceManager

Represents a nonce manager. It's responsibility is to produce nonce values and verify nonce values from untrusted sources that they are provided by this manager. This is usually required in web environment to mitigate CSRF attacks. Depending on it's underlying implementation it could be stateful or stateless. Note that there is usually some timeout for nonce values to reduce memory usage and to avoid replay attacks. Nonce length is unspecified.

Method Summary

Modifier and Type	Method and Description
java.lang.Object	newNonce(kotlin.coroutines.experimental.Continuation<? super java.lang.String> p) Generate new nonce instance
java.lang.Object	verifyNonce(java.lang.String nonce, kotlin.coroutines.experimental.Continuation<? super java.lang.Boolean> p) Verify nonce value

Method Detail

newNonce

java.lang.Object newNonce(kotlin.coroutines.experimental.Continuation<? super java.lang.String> p)

Generate new nonce instance

verifyNonce

java.lang.Object verifyNonce(java.lang.String nonce,
                             kotlin.coroutines.experimental.Continuation<? super java.lang.Boolean> p)

Verify nonce value

Returns:

true if nonce is valid