uk.ac.ed.epcc.webapp.servlet

Class NullCrsfTokenService

java.lang.Object

uk.ac.ed.epcc.webapp.AbstractContexed

uk.ac.ed.epcc.webapp.servlet.NullCrsfTokenService

All Implemented Interfaces:

AppContextCleanup, AppContextService<CrsfTokenService>, Contexed, CrsfTokenService

public class NullCrsfTokenService
extends AbstractContexed
implements CrsfTokenService

A CrsfTokenService that disables the check.

Field Summary

Fields inherited from class uk.ac.ed.epcc.webapp.AbstractContexed

conn

Constructor Summary

Constructors

Constructor and Description
NullCrsfTokenService(AppContext conn)

Method Summary

Modifier and Type	Method and Description
void	cleanup() AppContext is being closed.
<K,T,P extends TransitionFactory<K,T>> java.lang.String	getCrsfToken(P provider, T target) Get a crsf token for the operation.
java.lang.Class<? super CrsfTokenService>	getType() Returns the type of service the class should be registered under.

Methods inherited from class uk.ac.ed.epcc.webapp.AbstractContexed

getContext, getLogger, resetLogger

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NullCrsfTokenService

public NullCrsfTokenService(AppContext conn)

Parameters:

conn -

Method Detail

getType

public java.lang.Class<? super CrsfTokenService> getType()

Description copied from interface: AppContextService

Returns the type of service the class should be registered under.

Specified by:

getType in interface AppContextService<CrsfTokenService>

Returns:

registration type

cleanup

public void cleanup()

Description copied from interface: AppContextCleanup

AppContext is being closed. Only use this for cleanup that can't be handled by normal garbage collection or for state which is never returned by reference.

Specified by:

cleanup in interface AppContextCleanup

getCrsfToken

public <K,T,P extends TransitionFactory<K,T>> java.lang.String getCrsfToken(P provider,
                                                                            T target)

Description copied from interface: CrsfTokenService

Get a crsf token for the operation. If this method returns null the check is disabled. This may just remove a unique token for the session or it might return a different token for each provider/target. We don't mutate by transition as the view_target page uses a single form for multiple transitions selected by submit input. If these are direct transitions then they would need to validate the token.

Specified by:

getCrsfToken in interface CrsfTokenService

Returns:

token or null