com.liferay.portal.security.auth

Class MVCPortletAuthTokenWhitelist

java.lang.Object

com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

com.liferay.portal.security.auth.MVCPortletAuthTokenWhitelist

All Implemented Interfaces:

AuthTokenWhitelist

public class MVCPortletAuthTokenWhitelist
extends BaseAuthTokenWhitelist

Field Summary

Fields inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

serviceRegistrations, serviceTrackers

Constructor Summary

Constructors

Constructor and Description
MVCPortletAuthTokenWhitelist()

Method Summary

Modifier and Type	Method and Description
protected java.lang.String[]	getMVCActionCommandNames(javax.servlet.http.HttpServletRequest httpServletRequest, java.lang.String portletId)
protected java.lang.String[]	getMVCActionCommandNames(LiferayPortletURL liferayPortletURL)
protected java.lang.String	getWhitelistValue(java.lang.String portletName, java.lang.String whitelistAction)
boolean	isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, Portlet portlet)
boolean	isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, Portlet portlet)
boolean	isPortletURLCSRFWhitelisted(LiferayPortletURL liferayPortletURL)
boolean	isPortletURLPortletInvocationWhitelisted(LiferayPortletURL liferayPortletURL)
protected void	trackWhitelistServices(java.lang.String whitelistName, java.lang.Class<?> serviceClass, java.util.Set<java.lang.String> whiteList)

Methods inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

destroy, isOriginCSRFWhitelisted, isValidSharedSecret, registerPortalProperty, trackWhitelistServices

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MVCPortletAuthTokenWhitelist

public MVCPortletAuthTokenWhitelist()

Method Detail

isPortletCSRFWhitelisted

public boolean isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                        Portlet portlet)

Specified by:

isPortletCSRFWhitelisted in interface AuthTokenWhitelist

Overrides:

isPortletCSRFWhitelisted in class BaseAuthTokenWhitelist

isPortletInvocationWhitelisted

public boolean isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                              Portlet portlet)

Specified by:

isPortletInvocationWhitelisted in interface AuthTokenWhitelist

Overrides:

isPortletInvocationWhitelisted in class BaseAuthTokenWhitelist

isPortletURLCSRFWhitelisted

public boolean isPortletURLCSRFWhitelisted(LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLCSRFWhitelisted in interface AuthTokenWhitelist

Overrides:

isPortletURLCSRFWhitelisted in class BaseAuthTokenWhitelist

isPortletURLPortletInvocationWhitelisted

public boolean isPortletURLPortletInvocationWhitelisted(LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLPortletInvocationWhitelisted in interface AuthTokenWhitelist

Overrides:

isPortletURLPortletInvocationWhitelisted in class BaseAuthTokenWhitelist

getMVCActionCommandNames

protected java.lang.String[] getMVCActionCommandNames(javax.servlet.http.HttpServletRequest httpServletRequest,
                                                      java.lang.String portletId)

getMVCActionCommandNames

protected java.lang.String[] getMVCActionCommandNames(LiferayPortletURL liferayPortletURL)

getWhitelistValue

protected java.lang.String getWhitelistValue(java.lang.String portletName,
                                             java.lang.String whitelistAction)

trackWhitelistServices

protected void trackWhitelistServices(java.lang.String whitelistName,
                                      java.lang.Class<?> serviceClass,
                                      java.util.Set<java.lang.String> whiteList)