com.liferay.portal.kernel.security.auth

Class AuthTokenUtil

Object

com.liferay.portal.kernel.security.auth.AuthTokenUtil

public class AuthTokenUtil
extends Object

Author:

Amos Fong, Peter Fellwock, Raymond Augé

Constructor Summary

Constructors

Constructor and Description
AuthTokenUtil()

Method Summary

Modifier and Type	Method and Description
static void	addCSRFToken(javax.servlet.http.HttpServletRequest request, LiferayPortletURL liferayPortletURL)
static void	addPortletInvocationToken(javax.servlet.http.HttpServletRequest request, LiferayPortletURL liferayPortletURL)
static void	check(javax.servlet.http.HttpServletRequest request) Deprecated. As of Wilberforce (7.0.x), replaced by checkCSRFToken(HttpServletRequest, String)
static void	checkCSRFToken(javax.servlet.http.HttpServletRequest request, String origin)
static String	getToken(javax.servlet.http.HttpServletRequest request)
static String	getToken(javax.servlet.http.HttpServletRequest request, long plid, String portletId)
static boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request, Layout layout, Portlet portlet)
static boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request, long plid, String portletId, String strutsAction, String tokenValue) Deprecated. As of Wilberforce (7.0.x), replaced by isValidPortletInvocationToken(HttpServletRequest, Layout, Portlet)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthTokenUtil

public AuthTokenUtil()

Method Detail

addCSRFToken

public static void addCSRFToken(javax.servlet.http.HttpServletRequest request,
                                LiferayPortletURL liferayPortletURL)

addPortletInvocationToken

public static void addPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                             LiferayPortletURL liferayPortletURL)

check

@Deprecated
public static void check(javax.servlet.http.HttpServletRequest request)
                              throws PortalException

Deprecated. As of Wilberforce (7.0.x), replaced by checkCSRFToken(HttpServletRequest, String)

Throws:

PortalException

checkCSRFToken

public static void checkCSRFToken(javax.servlet.http.HttpServletRequest request,
                                  String origin)
                           throws PrincipalException

Throws:

PrincipalException

getToken

public static String getToken(javax.servlet.http.HttpServletRequest request)

getToken

public static String getToken(javax.servlet.http.HttpServletRequest request,
                              long plid,
                              String portletId)

isValidPortletInvocationToken

public static boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                                    Layout layout,
                                                    Portlet portlet)

isValidPortletInvocationToken

@Deprecated
public static boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest request,
                                                                long plid,
                                                                String portletId,
                                                                String strutsAction,
                                                                String tokenValue)

Deprecated. As of Wilberforce (7.0.x), replaced by isValidPortletInvocationToken(HttpServletRequest, Layout, Portlet)