Package org.springframework.security.web.csrf

Examples of org.springframework.security.web.csrf.CsrfToken

19
20
21
22
23
24
25
26
27
28
29
        this.tag = new CsrfInputTag();
    }

    @Test
    public void handleTokenReturnsHiddenInput() {
        CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "_csrf", "abc123def456ghi789");

        String value = this.tag.handleToken(token);

        assertNotNull("The returned value should not be null.", value);
        assertEquals("The output is not correct.",
View Full Code Here
31
32
33
34
35
36
37
38
39
40
41
                value);
    }

    @Test
    public void handleTokenReturnsHiddenInputDifferentTokenValue() {
        CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "csrfParameter", "fooBarBazQux");

        String value = this.tag.handleToken(token);

        assertNotNull("The returned value should not be null.", value);
        assertEquals("The output is not correct.",
View Full Code Here
98
99
100
101
102
103
104
105
106
107
108
   * @return the token
   * @see org.springframework.security.web.csrf.CsrfTokenRepository#loadToken(javax.servlet.http.HttpServletRequest)
   */
  public CsrfToken loadToken(HttpServletRequest request) {
    String cookie = Utils.getStateParam(Config.AUTH_COOKIE, request);
    CsrfToken token = null;
    if (cookie != null) {
      String ident;
      String[] ctokens = Utils.base64dec(cookie).split(":");
      if (StringUtils.startsWithAny(ctokens[0], "http", "https") && ctokens[1].startsWith("//")) {
        ident = ctokens[0].concat(":").concat(ctokens[1]);
View Full Code Here
78
79
80
81
82
83
84
85
86
87
         * org.springframework.test.web.servlet.request.RequestPostProcessor
         * #postProcessRequest(org.springframework.mock.web.MockHttpServletRequest)
         */
        @Override
        public MockHttpServletRequest postProcessRequest(MockHttpServletRequest request) {
            CsrfToken token = repository.generateToken(request);
            repository.saveToken(token, request, new MockHttpServletResponse());
            request.setParameter(token.getParameterName(), token.getToken());
            return request;
        }
View Full Code Here
18
19
20
21
22
23
24
25
26
27
28
29
30
31
    @Test
    public void testShouldReturnCorrectLogicalViewName() {
        // given
        HttpServletRequest request = mock(HttpServletRequest.class);
        CsrfToken csrfToken = mock(CsrfToken.class);
        when(request.getAttribute(CsrfToken.class.getName())).thenReturn(csrfToken);
        when(csrfToken.getParameterName()).thenReturn("parameterName");
        when(csrfToken.getToken()).thenReturn("token");
        Model model = new ExtendedModelMap();

        // when
        String page = new LoginPageController().getPage(request, model);
View Full Code Here
78
79
80
81
82
83
84
85
86
87
88
89
        }
        model.addAttribute("passwordPattern", User.PASSWORD_PATTERN);
        model.addAttribute("environment", environment);
        model.addAttribute("email", email);
        model.addAttribute("oneTimeToken", oneTimeToken);
        CsrfToken csrfToken = (CsrfToken) request.getAttribute(CsrfToken.class.getName());
        if (csrfToken != null) {
            model.addAttribute("csrfParameterName", csrfToken.getParameterName());
            model.addAttribute("csrfToken", csrfToken.getToken());
        }
        return "updatePassword";
    }
View Full Code Here
46
47
48
49
50
51
52
53
54
55
56
57
    @RequestMapping(value = "/register", method = RequestMethod.GET)
    public String registerForm(HttpServletRequest request, Model model) {
        setupModel(model);
        model.addAttribute("user", new User());
        CsrfToken csrfToken = (CsrfToken) request.getAttribute(CsrfToken.class.getName());
        if (csrfToken != null) {
            model.addAttribute("csrfParameterName", csrfToken.getParameterName());
            model.addAttribute("csrfToken", csrfToken.getToken());
        }
        return "register";
    }
View Full Code Here
14
15
16
17
18
19
20
21
22
23
24
25
@Controller
public class LoginPageController {

    @RequestMapping(value = "/login", method = RequestMethod.GET)
    public String getPage(HttpServletRequest request, Model model) {
        CsrfToken csrfToken = (CsrfToken) request.getAttribute(CsrfToken.class.getName());
        if (csrfToken != null) {
            model.addAttribute("csrfParameterName", csrfToken.getParameterName());
            model.addAttribute("csrfToken", csrfToken.getToken());
        }
        return "login";
    }
View Full Code Here
169
170
171
172
173
174
175
176
177
178
179
    @Test
    @DatabaseSetup("no-users.xml")
    @ExpectedDatabase(value="no-users.xml", assertionMode = DatabaseAssertionMode.NON_STRICT)
    public void registerUserAccount_NormalRegistrationAndEmptyForm_ShouldRenderRegistrationFormWithValidationErrors() throws Exception {
        CsrfToken csrfToken = new CsrfTokenBuilder()
                .headerName(IntegrationTestConstants.CSRF_TOKEN_HEADER_NAME)
                .requestParameterName(IntegrationTestConstants.CSRF_TOKEN_REQUEST_PARAM_NAME)
                .tokenValue(IntegrationTestConstants.CSRF_TOKEN_VALUE)
                .build();
View Full Code Here
210
211
212
213
214
215
216
217
218
219
220
    public void registerUserAccount_NormalRegistrationAndTooLongValues_ShouldRenderRegistrationFormWithValidationErrors() throws Exception {
        String email = TestUtil.createStringWithLength(101);
        String firstName = TestUtil.createStringWithLength(101);
        String lastName = TestUtil.createStringWithLength(101);

        CsrfToken csrfToken = new CsrfTokenBuilder()
                .headerName(IntegrationTestConstants.CSRF_TOKEN_HEADER_NAME)
                .requestParameterName(IntegrationTestConstants.CSRF_TOKEN_REQUEST_PARAM_NAME)
                .tokenValue(IntegrationTestConstants.CSRF_TOKEN_VALUE)
                .build();
View Full Code Here
TOP

Related Classes of org.springframework.security.web.csrf.CsrfToken

  • com.allanditzel.springframework.security.web.csrf.CsrfTokenResponseHeaderBindingFilter
  • com.erudika.para.security.CachedCsrfTokenRepository
  • net.petrikainulainen.spring.social.signinmvc.security.ITFormLoginTest
  • net.petrikainulainen.spring.social.signinmvc.user.controller.ITRegistrationControllerTest
  • org.jamesdbloom.web.controller.LoginPageController
  • org.jamesdbloom.web.controller.LoginPageControllerTest
  • org.jamesdbloom.web.controller.RegistrationController
  • org.jamesdbloom.web.controller.UpdatePasswordController
  • org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurerServlet31Tests
  • org.springframework.security.taglibs.csrf.AbstractCsrfTag
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.