Interface | Description |
---|---|
CsrfToken |
Provides the information about an expected CSRF token.
|
CsrfTokenRepository |
An API to allow changing the method in which the expected
CsrfToken
is associated to the HttpServletRequest . |
Class | Description |
---|---|
CsrfAuthenticationStrategy |
CsrfAuthenticationStrategy is in charge of removing the CsrfToken upon
authenticating. |
CsrfFilter |
Applies CSRF protection using a synchronizer token pattern.
|
CsrfLogoutHandler |
CsrfLogoutHandler is in charge of removing the CsrfToken upon
logout. |
DefaultCsrfToken |
A CSRF token that is used to protect against CSRF attacks.
|
HttpSessionCsrfTokenRepository |
Exception | Description |
---|---|
InvalidCsrfTokenException |
Thrown when an invalid or missing
CsrfToken is found in the HttpServletRequest |