Java HttpSessionCsrfTokenRepository类代码示例

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Bean
public CsrfTokenRepository csrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository =
            new HttpSessionCsrfTokenRepository();

    repository.setHeaderName("X-XSRF-TOKEN");
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
	http.antMatcher("/**")
		.authorizeRequests()
			.antMatchers("/", "/health", "/login**", "/webjars/**").permitAll()
			.anyRequest().authenticated()
		.and().logout().logoutSuccessUrl("/").permitAll()
		.and().csrf().csrfTokenRepository(new HttpSessionCsrfTokenRepository());
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
/**
 * define csrf header entry.
 *
 * @return csrf header entry
 */
@Bean
public CsrfTokenRepository csrfTokenRepository() {
  final HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
  repository.setHeaderName(ResourcePaths.XSRF_HEADER);
  return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
    log.info("configuring security with USSD gateway: {}", environment.getProperty("grassroot.ussd.gateway", "127.0.0.1"));
    http
            .authorizeRequests()
                .antMatchers("/index").permitAll()
                .antMatchers("/signup").permitAll()
                .antMatchers("/signup/extra").permitAll()
                .antMatchers("/user/recovery").permitAll()
                .antMatchers("/user/recovery/success").permitAll()
                .antMatchers("/grass-root-verification/*").permitAll()
                .antMatchers("/livewire/public/**").permitAll()
                .antMatchers("/cardauth/**").permitAll()
                .antMatchers("/donate/**").permitAll()
                .antMatchers("/ussd/**").access(assembleUssdGatewayAccessString())
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .successHandler(savedRequestAwareAuthenticationSuccessHandler())
                .defaultSuccessUrl("/home")
                .loginPage("/login")
                .loginProcessingUrl("/login")
                .permitAll()
                .and()
            .logout()
                .logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
                .logoutSuccessUrl("/login")
                .permitAll().and()
            .rememberMe()
                .rememberMeServices(rememberMeServices())
                .useSecureCookie(true).and()
            .headers().frameOptions().sameOrigin().and() // in future see if can path restrict this
            .csrf().csrfTokenRepository(new HttpSessionCsrfTokenRepository());
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    /**
     * You'll see references to the X-XSRF-TOKEN header in the javascript code.
     */
    repository.setHeaderName("X-XSRF-TOKEN");
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Bean
protected CsrfTokenRepository csrfTokenRepository()
{
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    repository.setHeaderName( "X-XSRF-TOKEN" );
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Bean
public CsrfTokenRepository getCsrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    repository.setSessionAttributeName(CSRF_SESSION_ATTRIBUTE);
    repository.setParameterName(CSRF_PARAM_NAME);
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    repository.setHeaderName("X-XSRF-TOKEN");
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository() {
	HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
	repository.setHeaderName("X-XSRF-TOKEN");
	return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    log.info(Json.toJson(repository));
    repository.setHeaderName(CSRF_HEADER_NAME);
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
/**
 * This method provides a new instance of {@code CsrfTokenRepository}
 *
 * @return the newly created {@code CsrfTokenRepository}
 */
@Bean
public CsrfTokenRepository csrfTokenRepository() {

  return new HttpSessionCsrfTokenRepository();
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository()
{
  HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
  repository.setHeaderName("X-XSRF-TOKEN");
  return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@Bean
public CsrfTokenRepository csrfTokenRepository() {
    final HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    repository.setHeaderName(CsrfCookieGeneratorFilter.ANGULAR_CSRF_DEFAULT_HEADER_NAME);
    return repository;
}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
@SuppressWarnings("unused")
private CsrfTokenRepository csrfTokenRepository() {
   	  HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
   	  repository.setHeaderName("X-XSRF-TOKEN");
   	  return repository;
   	}
 

import org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository; //导入依赖的package包/类
private CsrfTokenRepository csrfTokenRepository() {
    HttpSessionCsrfTokenRepository repository = new HttpSessionCsrfTokenRepository();
    repository.setHeaderName("X-XSRF-TOKEN");//for AngularJS's built-in CSRF feature
    return repository;
}