Package org.springframework.security.web.csrf
package org.springframework.security.web.csrf
-
ClassDescriptionA
CsrfTokenRepository
that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.CsrfAuthenticationStrategy
is in charge of removing theCsrfToken
upon authenticating.Thrown when an invalid or missingCsrfToken
is found in the HttpServletRequestApplies CSRF protection using a synchronizer token pattern.CsrfLogoutHandler
is in charge of removing theCsrfToken
upon logout.Provides the information about an expected CSRF token.An API to allow changing the method in which the expectedCsrfToken
is associated to theHttpServletRequest
.A CSRF token that is used to protect against CSRF attacks.Thrown when an expectedCsrfToken
exists, but it does not match the value present on theHttpServletRequest
ACsrfTokenRepository
that delays saving newCsrfToken
until the attributes of theCsrfToken
that were generated are accessed.Thrown when no expectedCsrfToken
is found but is required.