org.springframework.security.messaging.web.csrf

Class CsrfChannelInterceptor

java.lang.Object

org.springframework.messaging.support.ChannelInterceptorAdapter

org.springframework.security.messaging.web.csrf.CsrfChannelInterceptor

All Implemented Interfaces:

org.springframework.messaging.support.ChannelInterceptor

public final class CsrfChannelInterceptor
extends org.springframework.messaging.support.ChannelInterceptorAdapter

ChannelInterceptorAdapter that validates that a valid CSRF is included in the header of any SimpMessageType.CONNECT message. The expected CsrfToken is populated by CsrfTokenHandshakeInterceptor.

Since:

4.0

Constructor Summary

Constructors

Constructor and Description
CsrfChannelInterceptor()

Method Summary

Modifier and Type	Method and Description
org.springframework.messaging.Message<?>	preSend(org.springframework.messaging.Message<?> message, org.springframework.messaging.MessageChannel channel)

Methods inherited from class org.springframework.messaging.support.ChannelInterceptorAdapter

afterReceiveCompletion, afterSendCompletion, postReceive, postSend, preReceive

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CsrfChannelInterceptor

public CsrfChannelInterceptor()

Method Detail

preSend

public org.springframework.messaging.Message<?> preSend(org.springframework.messaging.Message<?> message,
                                                        org.springframework.messaging.MessageChannel channel)

Specified by:

preSend in interface org.springframework.messaging.support.ChannelInterceptor

Overrides:

preSend in class org.springframework.messaging.support.ChannelInterceptorAdapter