uk.ac.ed.epcc.webapp.servlet

Class DefaultCrsfTokenService

java.lang.Object

uk.ac.ed.epcc.webapp.AbstractContexed

uk.ac.ed.epcc.webapp.servlet.DefaultCrsfTokenService

All Implemented Interfaces:

AppContextCleanup, AppContextService<CrsfTokenService>, Contexed, CrsfTokenService

public class DefaultCrsfTokenService
extends AbstractContexed
implements CrsfTokenService

Field Summary

Fields inherited from class uk.ac.ed.epcc.webapp.AbstractContexed

conn

Constructor Summary

Constructors

Constructor and Description
DefaultCrsfTokenService(AppContext conn)

Method Summary

Modifier and Type	Method and Description
void	cleanup() AppContext is being closed.
<K,T,P extends TransitionFactory<K,T>> java.lang.String	getCrsfToken(P provider, T target) Get a crsf token for the operation.
java.lang.Class<? super CrsfTokenService>	getType() Returns the type of service the class should be registered under.

Methods inherited from class uk.ac.ed.epcc.webapp.AbstractContexed

getContext, getLogger, resetLogger

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultCrsfTokenService

public DefaultCrsfTokenService(AppContext conn)

Parameters:

conn -

Method Detail

getType

public java.lang.Class<? super CrsfTokenService> getType()

Description copied from interface: AppContextService

Returns the type of service the class should be registered under.

Specified by:

getType in interface AppContextService<CrsfTokenService>

Returns:

registration type

cleanup

public void cleanup()

Description copied from interface: AppContextCleanup

AppContext is being closed. Only use this for cleanup that can't be handled by normal garbage collection or for state which is never returned by reference.

Specified by:

cleanup in interface AppContextCleanup

getCrsfToken

public <K,T,P extends TransitionFactory<K,T>> java.lang.String getCrsfToken(P provider,
                                                                            T target)

Description copied from interface: CrsfTokenService

Get a crsf token for the operation. If this method returns null the check is disabled. This may just remove a unique token for the session or it might return a different token for each provider/target. We don't mutate by transition as the view_target page uses a single form for multiple transitions selected by submit input. If these are direct transitions then they would need to validate the token.

Specified by:

getCrsfToken in interface CrsfTokenService

Returns:

token or null