Package org.springframework.security.messaging.web.csrf

Class XorCsrfChannelInterceptor

  • All Implemented Interfaces:
    org.springframework.messaging.support.ChannelInterceptor
    public final class XorCsrfChannelInterceptor
extends java.lang.Object
implements org.springframework.messaging.support.ChannelInterceptor
    ChannelInterceptor that validates a CSRF token masked by the XorCsrfTokenRequestAttributeHandler in the header of any SimpMessageType.CONNECT message.
    Since:
    5.8

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      org.springframework.messaging.Message<?> preSend​(org.springframework.messaging.Message<?> message, org.springframework.messaging.MessageChannel channel)  

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

      • Methods inherited from interface org.springframework.messaging.support.ChannelInterceptor

        afterReceiveCompletion, afterSendCompletion, postReceive, postSend, preReceive

    • Constructor Detail

      • XorCsrfChannelInterceptor

        public XorCsrfChannelInterceptor()

    • Method Detail

      • preSend

        public org.springframework.messaging.Message<?> preSend​(org.springframework.messaging.Message<?> message,
                                                        org.springframework.messaging.MessageChannel channel)
        Specified by:
        preSend in interface org.springframework.messaging.support.ChannelInterceptor