001 /** 002 * Copyright (c) 2000-2013 Liferay, Inc. All rights reserved. 003 * 004 * This library is free software; you can redistribute it and/or modify it under 005 * the terms of the GNU Lesser General Public License as published by the Free 006 * Software Foundation; either version 2.1 of the License, or (at your option) 007 * any later version. 008 * 009 * This library is distributed in the hope that it will be useful, but WITHOUT 010 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS 011 * FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more 012 * details. 013 */ 014 015 package com.liferay.portal.security.auth; 016 017 import com.liferay.portal.kernel.exception.PortalException; 018 019 import javax.servlet.http.HttpServletRequest; 020 021 /** 022 * @author Amos Fong 023 */ 024 public interface AuthToken { 025 026 /** 027 * @deprecated As of 6.2.0, replaced by {@link 028 * #checkCSRFToken(HttpServletRequest, String)} 029 */ 030 public void check(HttpServletRequest request) throws PortalException; 031 032 public void checkCSRFToken(HttpServletRequest request, String origin) 033 throws PrincipalException; 034 035 public String getToken(HttpServletRequest request); 036 037 public String getToken( 038 HttpServletRequest request, long plid, String portletId); 039 040 public boolean isValidPortletInvocationToken( 041 HttpServletRequest request, long plid, String portletId, 042 String strutsAction, String tokenValue); 043 044 }