org.pac4j.core.authorization.authorizer.csrf

Class CsrfAuthorizer<U extends UserProfile>

java.lang.Object

org.pac4j.core.authorization.authorizer.csrf.CsrfAuthorizer<U>

All Implemented Interfaces:

Authorizer<U>

public class CsrfAuthorizer<U extends UserProfile>
extends Object
implements Authorizer<U>

Authorizer that checks CSRF tokens.

Since:

1.8.0

Author:

Jerome Leleu

Constructor Summary

Constructors

Constructor and Description
CsrfAuthorizer()
CsrfAuthorizer(String parameterName, String headerName)
CsrfAuthorizer(String parameterName, String headerName, boolean onlyCheckPostRequest)

Method Summary

Modifier and Type	Method and Description
String	getHeaderName()
String	getParameterName()
boolean	isAuthorized(WebContext context, U profile) Checks if the user profile is authorized for the current web context.
boolean	isOnlyCheckPostRequest()
void	setHeaderName(String headerName)
void	setOnlyCheckPostRequest(boolean onlyCheckPostRequest)
void	setParameterName(String parameterName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CsrfAuthorizer

public CsrfAuthorizer()

CsrfAuthorizer

public CsrfAuthorizer(String parameterName,
                      String headerName)

CsrfAuthorizer

public CsrfAuthorizer(String parameterName,
                      String headerName,
                      boolean onlyCheckPostRequest)

Method Detail

isAuthorized

public boolean isAuthorized(WebContext context,
                            U profile)

Description copied from interface: Authorizer

Checks if the user profile is authorized for the current web context.

Specified by:

isAuthorized in interface Authorizer<U extends UserProfile>

Parameters:

context - the web context

profile - the user profile

Returns:

if the access is authorized

getParameterName

public String getParameterName()

setParameterName

public void setParameterName(String parameterName)

getHeaderName

public String getHeaderName()

setHeaderName

public void setHeaderName(String headerName)

isOnlyCheckPostRequest

public boolean isOnlyCheckPostRequest()

setOnlyCheckPostRequest

public void setOnlyCheckPostRequest(boolean onlyCheckPostRequest)