com.liferay.portal.security.auth

Class SessionAuthToken

Object

com.liferay.portal.security.auth.SessionAuthToken

All Implemented Interfaces:

com.liferay.portal.kernel.security.auth.AuthToken

public class SessionAuthToken
extends Object
implements com.liferay.portal.kernel.security.auth.AuthToken

Author:

Amos Fong

Constructor Summary

Constructors

Constructor and Description
SessionAuthToken()

Method Summary

Modifier and Type	Method and Description
void	addCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
void	addPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
void	checkCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest, String origin)
protected String	getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest httpServletRequest, String key, boolean createToken)
String	getToken(javax.servlet.http.HttpServletRequest httpServletRequest)
String	getToken(javax.servlet.http.HttpServletRequest httpServletRequest, long plid, String portletId)
boolean	isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.model.Layout layout, com.liferay.portal.kernel.model.Portlet portlet)

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionAuthToken

public SessionAuthToken()

Method Detail

addCSRFToken

public void addCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                         com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

addCSRFToken in interface com.liferay.portal.kernel.security.auth.AuthToken

addPortletInvocationToken

public void addPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                      com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

addPortletInvocationToken in interface com.liferay.portal.kernel.security.auth.AuthToken

checkCSRFToken

public void checkCSRFToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                           String origin)
                    throws com.liferay.portal.kernel.security.auth.PrincipalException

Specified by:

checkCSRFToken in interface com.liferay.portal.kernel.security.auth.AuthToken

Throws:

com.liferay.portal.kernel.security.auth.PrincipalException

getToken

public String getToken(javax.servlet.http.HttpServletRequest httpServletRequest)

Specified by:

getToken in interface com.liferay.portal.kernel.security.auth.AuthToken

getToken

public String getToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                       long plid,
                       String portletId)

Specified by:

getToken in interface com.liferay.portal.kernel.security.auth.AuthToken

isValidPortletInvocationToken

public boolean isValidPortletInvocationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                             com.liferay.portal.kernel.model.Layout layout,
                                             com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isValidPortletInvocationToken in interface com.liferay.portal.kernel.security.auth.AuthToken

getSessionAuthenticationToken

protected String getSessionAuthenticationToken(javax.servlet.http.HttpServletRequest httpServletRequest,
                                               String key,
                                               boolean createToken)