Package org.springframework.security.web.csrf

Interface Summary

Interface	Description
CsrfToken	Provides the information about an expected CSRF token.
CsrfTokenRepository	An API to allow changing the method in which the expected CsrfToken is associated to the HttpServletRequest.
CsrfTokenRequestAttributeHandler	A callback interface that is used to make the CsrfToken created by the CsrfTokenRepository available as a request attribute.
CsrfTokenRequestResolver	Implementations of this interface are capable of resolving the token value of a CsrfToken from the provided HttpServletRequest.

Class Summary

Class	Description
CookieCsrfTokenRepository	A CsrfTokenRepository that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.
CsrfAuthenticationStrategy	CsrfAuthenticationStrategy is in charge of removing the CsrfToken upon authenticating.
CsrfFilter	Applies CSRF protection using a synchronizer token pattern.
CsrfLogoutHandler	CsrfLogoutHandler is in charge of removing the CsrfToken upon logout.
CsrfTokenRequestProcessor	An implementation of the CsrfTokenRequestAttributeHandler and CsrfTokenRequestResolver interfaces that is capable of making the CsrfToken available as a request attribute and resolving the token value as either a header or parameter value of the request.
DefaultCsrfToken	A CSRF token that is used to protect against CSRF attacks.
HttpSessionCsrfTokenRepository	A CsrfTokenRepository that stores the CsrfToken in the HttpSession.
LazyCsrfTokenRepository	A CsrfTokenRepository that delays saving new CsrfToken until the attributes of the CsrfToken that were generated are accessed.

Exception Summary

Exception	Description
CsrfException	Thrown when an invalid or missing CsrfToken is found in the HttpServletRequest
InvalidCsrfTokenException	Thrown when an expected CsrfToken exists, but it does not match the value present on the HttpServletRequest
MissingCsrfTokenException	Thrown when no expected CsrfToken is found but is required.