org.broadleafcommerce.common.security.service

Class StaleStateProtectionServiceImpl

java.lang.Object

org.broadleafcommerce.common.security.service.StaleStateProtectionServiceImpl

All Implemented Interfaces:

StaleStateProtectionService

@Service(value="blStaleStateProtectionService")
public class StaleStateProtectionServiceImpl
extends Object
implements StaleStateProtectionService

Author:

jfischer

See Also:

StaleStateProtectionService

Field Summary

Fields

Modifier and Type	Field and Description
protected boolean	staleStateProtectionEnabled
static String	STATEVERSIONTOKEN
static String	STATEVERSIONTOKENPARAMETER

Constructor Summary

Constructors

Constructor and Description
StaleStateProtectionServiceImpl()

Method Summary

Methods

Modifier and Type	Method and Description
void	compareToken(String passedToken) Compare the state version token provided by the request to what is resident in the user session.
String	getStateVersionToken() Retrieve the state version token resident in the user's session, or create one if it doesn't exist.
String	getStateVersionTokenParameter() Retrieve the parameter key used to harvest the state version token value from the request
void	invalidateState() Remove the current state version token in the user's session, if exists.
boolean	isEnabled() Whether or not the protection provided by this service is active.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

STATEVERSIONTOKEN

public static final String STATEVERSIONTOKEN

See Also:

Constant Field Values

STATEVERSIONTOKENPARAMETER

public static final String STATEVERSIONTOKENPARAMETER

See Also:

Constant Field Values

staleStateProtectionEnabled

@Value(value="${stale.state.protection.enabled:false}")
protected boolean staleStateProtectionEnabled

Constructor Detail

StaleStateProtectionServiceImpl

public StaleStateProtectionServiceImpl()

Method Detail

compareToken

public void compareToken(String passedToken)

Description copied from interface: StaleStateProtectionService

Compare the state version token provided by the request to what is resident in the user session. If the tokens are not equal, the determination is made that the request is coming from a stale page and a StaleStateServiceException is emitted.

Specified by:

compareToken in interface StaleStateProtectionService

Parameters:

passedToken - the state version token from the request

getStateVersionToken

public String getStateVersionToken()

Description copied from interface: StaleStateProtectionService

Retrieve the state version token resident in the user's session, or create one if it doesn't exist.

Specified by:

getStateVersionToken in interface StaleStateProtectionService

Returns:

invalidateState

public void invalidateState()

Description copied from interface: StaleStateProtectionService

Remove the current state version token in the user's session, if exists. This usually occurs in response to a key state change.

Specified by:

invalidateState in interface StaleStateProtectionService

isEnabled

public boolean isEnabled()

Description copied from interface: StaleStateProtectionService

Whether or not the protection provided by this service is active.

Specified by:

isEnabled in interface StaleStateProtectionService

Returns:

getStateVersionTokenParameter

public String getStateVersionTokenParameter()

Description copied from interface: StaleStateProtectionService

Retrieve the parameter key used to harvest the state version token value from the request

Specified by:

getStateVersionTokenParameter in interface StaleStateProtectionService

Returns: