Package com.liferay.portal.kernel.security.auth

Class BaseAuthTokenWhitelist

java.lang.Object

com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

All Implemented Interfaces:

AuthTokenWhitelist

public abstract class BaseAuthTokenWhitelist
extends Object
implements AuthTokenWhitelist

Author:

Tomas Polesovsky

Field Summary

Fields

Modifier and Type	Field	Description
protected final List<org.osgi.framework.ServiceRegistration<?>>	serviceRegistrations
protected final List<org.osgi.util.tracker.ServiceTracker<Object,Object>>	serviceTrackers

Constructor Summary

Constructors

Constructor	Description
BaseAuthTokenWhitelist()

Method Summary

Modifier and Type	Method	Description
protected void	destroy()
boolean	isOriginCSRFWhitelisted(long companyId, String origin)
boolean	isPortletCSRFWhitelisted(jakarta.servlet.http.HttpServletRequest httpServletRequest, Portlet portlet)
boolean	isPortletInvocationWhitelisted(jakarta.servlet.http.HttpServletRequest httpServletRequest, Portlet portlet)
boolean	isPortletURLCSRFWhitelisted(LiferayPortletURL liferayPortletURL)
boolean	isPortletURLPortletInvocationWhitelisted(LiferayPortletURL liferayPortletURL)
boolean	isValidSharedSecret(String sharedSecret)
protected void	registerPortalProperty(String key)
protected void	trackWhitelistServices(String whitelistName, Set<String> whiteList)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

serviceRegistrations

protected final List<org.osgi.framework.ServiceRegistration<?>> serviceRegistrations

serviceTrackers

protected final List<org.osgi.util.tracker.ServiceTracker<Object,Object>> serviceTrackers

Constructor Details

BaseAuthTokenWhitelist

public BaseAuthTokenWhitelist()

Method Details

isOriginCSRFWhitelisted

public boolean isOriginCSRFWhitelisted(long companyId,
 String origin)

Specified by:

isOriginCSRFWhitelisted in interface AuthTokenWhitelist

isPortletCSRFWhitelisted

public boolean isPortletCSRFWhitelisted(jakarta.servlet.http.HttpServletRequest httpServletRequest,
 Portlet portlet)

Specified by:

isPortletCSRFWhitelisted in interface AuthTokenWhitelist

isPortletInvocationWhitelisted

public boolean isPortletInvocationWhitelisted(jakarta.servlet.http.HttpServletRequest httpServletRequest,
 Portlet portlet)

Specified by:

isPortletInvocationWhitelisted in interface AuthTokenWhitelist

isPortletURLCSRFWhitelisted

public boolean isPortletURLCSRFWhitelisted(LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLCSRFWhitelisted in interface AuthTokenWhitelist

isPortletURLPortletInvocationWhitelisted

public boolean isPortletURLPortletInvocationWhitelisted(LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLPortletInvocationWhitelisted in interface AuthTokenWhitelist

isValidSharedSecret

public boolean isValidSharedSecret(String sharedSecret)

Specified by:

isValidSharedSecret in interface AuthTokenWhitelist

destroy

protected void destroy()

registerPortalProperty

protected void registerPortalProperty(String key)

trackWhitelistServices

protected void trackWhitelistServices(String whitelistName,
 Set<String> whiteList)