Package org.springframework.security.web.csrf

Examples of org.springframework.security.web.csrf.CsrfToken

83
84
85
86
87
88
89
90
91
92
93
                .andExpect(redirectedUrl("/login?error=bad_credentials"));
    }

    @Test
    public void login_UserNotFound_ShouldRedirectUserToLoginForm() throws Exception {
        CsrfToken csrfToken = new CsrfTokenBuilder()
                .headerName(IntegrationTestConstants.CSRF_TOKEN_HEADER_NAME)
                .requestParameterName(IntegrationTestConstants.CSRF_TOKEN_REQUEST_PARAM_NAME)
                .tokenValue(IntegrationTestConstants.CSRF_TOKEN_VALUE)
                .build();
View Full Code Here
101
102
103
104
105
106
107
108
109
110
111
                .andExpect(redirectedUrl("/login?error=bad_credentials"));
    }

    @Test
    public void login_CredentialsAreCorrect_ShouldRedirectUserToFrontPage() throws Exception {
        CsrfToken csrfToken = new CsrfTokenBuilder()
                .headerName(IntegrationTestConstants.CSRF_TOKEN_HEADER_NAME)
                .requestParameterName(IntegrationTestConstants.CSRF_TOKEN_REQUEST_PARAM_NAME)
                .tokenValue(IntegrationTestConstants.CSRF_TOKEN_VALUE)
                .build();
View Full Code Here
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
    protected static final String RESPONSE_PARAM_NAME = "X-CSRF-PARAM";
    protected static final String RESPONSE_TOKEN_NAME = "X-CSRF-TOKEN";

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, javax.servlet.FilterChain filterChain) throws ServletException, IOException {
        CsrfToken token = (CsrfToken) request.getAttribute(REQUEST_ATTRIBUTE_NAME);

        if (token != null) {
            response.setHeader(RESPONSE_HEADER_NAME, token.getHeaderName());
            response.setHeader(RESPONSE_PARAM_NAME, token.getParameterName());
            response.setHeader(RESPONSE_TOKEN_NAME , token.getToken());
        }

        filterChain.doFilter(request, response);
    }
View Full Code Here
89
90
91
92
93
94
95
96
97
98
99
   * @return the token
   * @see org.springframework.security.web.csrf.CsrfTokenRepository#loadToken(javax.servlet.http.HttpServletRequest)
   */
  public CsrfToken loadToken(HttpServletRequest request) {
    String cookie = Utils.getStateParam(Config.AUTH_COOKIE, request);
    CsrfToken token;
    if (cookie != null) {
      String ident;
      String[] ctokens = Utils.base64dec(cookie).split(":");
      if (StringUtils.startsWithAny(ctokens[0], "http", "https") && ctokens[1].startsWith("//")) {
        ident = ctokens[0].concat(":").concat(ctokens[1]);
View Full Code Here
TOP

Related Classes of org.springframework.security.web.csrf.CsrfToken

  • com.allanditzel.springframework.security.web.csrf.CsrfTokenResponseHeaderBindingFilter
  • com.erudika.para.security.CachedCsrfTokenRepository
  • net.petrikainulainen.spring.social.signinmvc.security.ITFormLoginTest
  • net.petrikainulainen.spring.social.signinmvc.user.controller.ITRegistrationControllerTest
  • org.jamesdbloom.web.controller.LoginPageController
  • org.jamesdbloom.web.controller.LoginPageControllerTest
  • org.jamesdbloom.web.controller.RegistrationController
  • org.jamesdbloom.web.controller.UpdatePasswordController
  • org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurerServlet31Tests
  • org.springframework.security.taglibs.csrf.AbstractCsrfTag
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.