com.liferay.portal.security.auth

Class SessionAuthToken

java.lang.Object

com.liferay.portal.security.auth.SessionAuthToken

All Implemented Interfaces:

AuthToken

public class SessionAuthToken
extends java.lang.Object
implements AuthToken

Constructor Summary

Constructors

Constructor and Description
SessionAuthToken()

Method Summary

Modifier and Type	Method and Description
void	addCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest, LiferayPortletURL liferayPortletURL)
void	addPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest, LiferayPortletURL liferayPortletURL)
void	checkCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest, java.lang.String origin)
protected java.lang.String	getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest httpServletRequest, java.lang.String key, boolean createToken)
java.lang.String	getToken(javax.servlet.http.HttpServletRequest httpServletRequest)
java.lang.String	getToken(javax.servlet.http.HttpServletRequest httpServletRequest, long plid, java.lang.String portletId)
boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest, Layout layout, Portlet portlet)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionAuthToken

public SessionAuthToken()

Method Detail

addCSRFToken

public void addCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                         LiferayPortletURL liferayPortletURL)

Specified by:

addCSRFToken in interface AuthToken

addPortletInvocationToken

public void addPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                      LiferayPortletURL liferayPortletURL)

Specified by:

addPortletInvocationToken in interface AuthToken

checkCSRFToken

public void checkCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                           java.lang.String origin)
                    throws PrincipalException

Specified by:

checkCSRFToken in interface AuthToken

Throws:

PrincipalException

getToken

public java.lang.String getToken(javax.servlet.http.HttpServletRequest httpServletRequest)

Specified by:

getToken in interface AuthToken

getToken

public java.lang.String getToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                 long plid,
                                 java.lang.String portletId)

Specified by:

getToken in interface AuthToken

isValidPortletInvocationToken

public boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                             Layout layout,
                                             Portlet portlet)

Specified by:

isValidPortletInvocationToken in interface AuthToken

getSessionAuthenticationToken

protected java.lang.String getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                                         java.lang.String key,
                                                         boolean createToken)