uk.ac.ed.epcc.webapp.servlet

Interface CrsfTokenService

All Superinterfaces:

AppContextCleanup, AppContextService<CrsfTokenService>

All Known Implementing Classes:

DefaultCrsfTokenService, NullCrsfTokenService

public interface CrsfTokenService
extends AppContextService<CrsfTokenService>

An AppContextService to generate CRSF tokens

Method Summary

Modifier and Type	Method and Description
<K,T,P extends TransitionFactory<K,T>> java.lang.String	getCrsfToken(P provider, T target) Get a crsf token for the operation.

Methods inherited from interface uk.ac.ed.epcc.webapp.AppContextService

getType

Methods inherited from interface uk.ac.ed.epcc.webapp.AppContextCleanup

cleanup

Method Detail

getCrsfToken

<K,T,P extends TransitionFactory<K,T>> java.lang.String getCrsfToken(P provider,
                                                                     T target)

Get a crsf token for the operation. If this method returns null the check is disabled. This may just remove a unique token for the session or it might return a different token for each provider/target. We don't mutate by transition as the view_target page uses a single form for multiple transitions selected by submit input. If these are direct transitions then they would need to validate the token.

Parameters:

provider -

target -

Returns:

token or null