com.liferay.portal.security.auth

Class SessionAuthToken

Object

com.liferay.portal.security.auth.SessionAuthToken

All Implemented Interfaces:

com.liferay.portal.kernel.security.auth.AuthToken

public class SessionAuthToken
extends Object
implements com.liferay.portal.kernel.security.auth.AuthToken

Author:

Amos Fong

Constructor Summary

Constructors

Constructor and Description
SessionAuthToken()

Method Summary

Modifier and Type	Method and Description
void	addCSRFToken(javax.servlet.http.HttpServletRequest request, com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
void	addPortletInvocationToken(javax.servlet.http.HttpServletRequest request, com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
void	check(javax.servlet.http.HttpServletRequest request) Deprecated. As of Wilberforce (7.0.x)
void	checkCSRFToken(javax.servlet.http.HttpServletRequest request, String origin)
protected String	getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest request, String key, boolean createToken)
String	getToken(javax.servlet.http.HttpServletRequest request)
String	getToken(javax.servlet.http.HttpServletRequest request, long plid, String portletId)
boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request, com.liferay.portal.kernel.model.Layout layout, com.liferay.portal.kernel.model.Portlet portlet)
boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request, long plid, String portletId, String strutsAction, String tokenValue) Deprecated. As of Wilberforce (7.0.x)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionAuthToken

public SessionAuthToken()

Method Detail

addCSRFToken

public void addCSRFToken(javax.servlet.http.HttpServletRequest request,
                         com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

addCSRFToken in interface com.liferay.portal.kernel.security.auth.AuthToken

addPortletInvocationToken

public void addPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                      com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

addPortletInvocationToken in interface com.liferay.portal.kernel.security.auth.AuthToken

check

@Deprecated
public void check(javax.servlet.http.HttpServletRequest request)
                       throws com.liferay.portal.kernel.security.auth.PrincipalException

Deprecated. As of Wilberforce (7.0.x)

Specified by:

check in interface com.liferay.portal.kernel.security.auth.AuthToken

Throws:

com.liferay.portal.kernel.security.auth.PrincipalException

checkCSRFToken

public void checkCSRFToken(javax.servlet.http.HttpServletRequest request,
                           String origin)
                    throws com.liferay.portal.kernel.security.auth.PrincipalException

Specified by:

checkCSRFToken in interface com.liferay.portal.kernel.security.auth.AuthToken

Throws:

com.liferay.portal.kernel.security.auth.PrincipalException

getToken

public String getToken(javax.servlet.http.HttpServletRequest request)

Specified by:

getToken in interface com.liferay.portal.kernel.security.auth.AuthToken

getToken

public String getToken(javax.servlet.http.HttpServletRequest request,
                       long plid,
                       String portletId)

Specified by:

getToken in interface com.liferay.portal.kernel.security.auth.AuthToken

isValidPortletInvocationToken

public boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                             com.liferay.portal.kernel.model.Layout layout,
                                             com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isValidPortletInvocationToken in interface com.liferay.portal.kernel.security.auth.AuthToken

isValidPortletInvocationToken

@Deprecated
public boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                                         long plid,
                                                         String portletId,
                                                         String strutsAction,
                                                         String tokenValue)

Deprecated. As of Wilberforce (7.0.x)

Specified by:

isValidPortletInvocationToken in interface com.liferay.portal.kernel.security.auth.AuthToken

getSessionAuthenticationToken

protected String getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest request,
                                               String key,
                                               boolean createToken)