com.liferay.portal.security.auth
Class AuthTokenWhitelistUtil

java.lang.Object
  com.liferay.portal.security.auth.AuthTokenWhitelistUtil

public class AuthTokenWhitelistUtil
extends java.lang.Object

Author:

Tomas Polesovsky, Raymond Augé

Constructor Summary

AuthTokenWhitelistUtil()

Method Summary

static AuthTokenWhitelist	getAuthTokenWhitelist()
static java.util.Set<java.lang.String>	getPortletCSRFWhitelist()
static java.util.Set<java.lang.String>	getPortletCSRFWhitelistActions()
static java.util.Set<java.lang.String>	getPortletInvocationWhitelist()
static java.util.Set<java.lang.String>	getPortletInvocationWhitelistActions()
static boolean	isCSRFOrigintWhitelisted(long companyId, java.lang.String origin)
static boolean	isPortletCSRFWhitelisted(long companyId, java.lang.String portletId, java.lang.String strutsAction)
static boolean	isPortletInvocationWhitelisted(long companyId, java.lang.String portletId, java.lang.String strutsAction)
static boolean	isValidSharedSecret(java.lang.String sharedSecret)
static java.util.Set<java.lang.String>	resetOriginCSRFWhitelist()
static java.util.Set<java.lang.String>	resetPortletCSRFWhitelist()
static java.util.Set<java.lang.String>	resetPortletCSRFWhitelistActions()
static java.util.Set<java.lang.String>	resetPortletInvocationWhitelist()
static java.util.Set<java.lang.String>	resetPortletInvocationWhitelistActions()
void	setAuthTokenWhitelist(AuthTokenWhitelist authTokenWhitelist)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthTokenWhitelistUtil

public AuthTokenWhitelistUtil()

Method Detail

getAuthTokenWhitelist

public static AuthTokenWhitelist getAuthTokenWhitelist()

getPortletCSRFWhitelist

public static java.util.Set<java.lang.String> getPortletCSRFWhitelist()

getPortletCSRFWhitelistActions

public static java.util.Set<java.lang.String> getPortletCSRFWhitelistActions()

getPortletInvocationWhitelist

public static java.util.Set<java.lang.String> getPortletInvocationWhitelist()

getPortletInvocationWhitelistActions

public static java.util.Set<java.lang.String> getPortletInvocationWhitelistActions()

isCSRFOrigintWhitelisted

public static boolean isCSRFOrigintWhitelisted(long companyId,
                                               java.lang.String origin)

isPortletCSRFWhitelisted

public static boolean isPortletCSRFWhitelisted(long companyId,
                                               java.lang.String portletId,
                                               java.lang.String strutsAction)

isPortletInvocationWhitelisted

public static boolean isPortletInvocationWhitelisted(long companyId,
                                                     java.lang.String portletId,
                                                     java.lang.String strutsAction)

isValidSharedSecret

public static boolean isValidSharedSecret(java.lang.String sharedSecret)

resetOriginCSRFWhitelist

public static java.util.Set<java.lang.String> resetOriginCSRFWhitelist()

resetPortletCSRFWhitelist

public static java.util.Set<java.lang.String> resetPortletCSRFWhitelist()

resetPortletCSRFWhitelistActions

public static java.util.Set<java.lang.String> resetPortletCSRFWhitelistActions()

resetPortletInvocationWhitelist

public static java.util.Set<java.lang.String> resetPortletInvocationWhitelist()

resetPortletInvocationWhitelistActions

public static java.util.Set<java.lang.String> resetPortletInvocationWhitelistActions()

setAuthTokenWhitelist

public void setAuthTokenWhitelist(AuthTokenWhitelist authTokenWhitelist)