Package net.shibboleth.idp.ui.csrf.impl
@NonnullElements
package net.shibboleth.idp.ui.csrf.impl
Implementation classes for cross-site request forgery mitigation.
-
ClassesClassDescriptionA flow execution lifecycle listener that, if enabled: Sets an anti-CSRF token into the flow-scope map when a flow session starts and a token per-flow is enabled. Sets an anti-CSRF token into the view-scope map when rendering a suitable view-state.Default
BiPredicatefor determining if CSRF token validation should occur from a compatible request context and event.DefaultPredicatefor determining if a CSRF token is required for the given request context.A default, immutable, implementation of aCSRFToken.