net.croz.nrich.security.csrf.api.service

Interface CsrfTokenManagerService

public interface CsrfTokenManagerService

Generates, validates and refreshes CSRF tokens. Uses CsrfTokenKeyHolder instances for storing and resolving tokens.

Method Summary

Modifier and Type	Method and Description
java.lang.String	generateToken(CsrfTokenKeyHolder csrfTokenKeyHolder) Generates token from key resolved from CsrfTokenKeyHolder if key is null a new key is generated and stored.
void	validateAndRefreshToken(CsrfTokenKeyHolder csrfTokenKeyHolder) Validates and refreshes CSRF token.

Method Detail

validateAndRefreshToken

void validateAndRefreshToken(CsrfTokenKeyHolder csrfTokenKeyHolder)

Validates and refreshes CSRF token. Encryption key is resolved from CsrfTokenKeyHolder if key is null a new key is generated and stored. If token is missing or invalid a CsrfTokenException is thrown.

Parameters:

csrfTokenKeyHolder - holder for csrf tokens and encryption keys

generateToken

java.lang.String generateToken(CsrfTokenKeyHolder csrfTokenKeyHolder)

Generates token from key resolved from CsrfTokenKeyHolder if key is null a new key is generated and stored.

Parameters:

csrfTokenKeyHolder - holder for csrf tokens and encryption keys

Returns:

generated CSRF token.