com.gwtplatform.dispatch.client

Class DefaultSecurityCookieAccessor

java.lang.Object

com.gwtplatform.dispatch.client.DefaultSecurityCookieAccessor

All Implemented Interfaces:

SecurityCookieAccessor

public class DefaultSecurityCookieAccessor
extends Object
implements SecurityCookieAccessor

This class provides access to the session id client side by looking into a cookie on the browser. This will work to prevent XSRF attack.

To use this class you have to bind a constant string annotated with @SecurityCookie to your desired cookie name.

Field Summary

Fields

Modifier and Type	Field and Description
String	cookieName

Constructor Summary

Constructors

Constructor and Description
DefaultSecurityCookieAccessor()

Method Summary

Methods

Modifier and Type	Method and Description
String	getCookieContent() Gets the current content of the security cookie, using javascript.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

cookieName

@Inject(optional=true)
public String cookieName

Constructor Detail

DefaultSecurityCookieAccessor

public DefaultSecurityCookieAccessor()

Method Detail

getCookieContent

public String getCookieContent()

Description copied from interface: SecurityCookieAccessor

Gets the current content of the security cookie, using javascript.

Specified by:

getCookieContent in interface SecurityCookieAccessor

Returns:

The current content of the security cookie, or null if no protection again XSRF is needed.