play.filters.csrf

CSRFFilter

case class CSRFFilter(tokenName: String = CSRFConf.TokenName, cookieName: Option[String] = CSRFConf.CookieName, secureCookie: Boolean = CSRFConf.SecureCookie, createIfNotFound: (RequestHeader) ⇒ Boolean = ...) extends EssentialFilter with Product with Serializable

A filter that provides CSRF protection.

tokenName

The key used to store the token in the Play session. Defaults to csrfToken.

cookieName

If defined, causes the filter to store the token in a Cookie with this name instead of the session.

secureCookie

If storing the token in a cookie, whether this Cookie should set the secure flag. Defaults to whether the session cookie is configured to be secure.

createIfNotFound

Whether a new CSRF token should be created if it's not found. Default creates one if it's a GET request that accepts HTML.

Source
CSRFFilter.scala
Linear Supertypes
Serializable, Serializable, Product, Equals, EssentialFilter, AnyRef, Any
Ordering
  1. Alphabetic
  2. By inheritance
Inherited
  1. CSRFFilter
  2. Serializable
  3. Serializable
  4. Product
  5. Equals
  6. EssentialFilter
  7. AnyRef
  8. Any
  1. Hide All
  2. Show all
Learn more about member selection
Visibility
  1. Public
  2. All

Instance Constructors

  1. new CSRFFilter()

    Default constructor, useful from Java

  2. new CSRFFilter(tokenName: String = CSRFConf.TokenName, cookieName: Option[String] = CSRFConf.CookieName, secureCookie: Boolean = CSRFConf.SecureCookie, createIfNotFound: (RequestHeader) ⇒ Boolean = ...)

    tokenName

    The key used to store the token in the Play session. Defaults to csrfToken.

    cookieName

    If defined, causes the filter to store the token in a Cookie with this name instead of the session.

    secureCookie

    If storing the token in a cookie, whether this Cookie should set the secure flag. Defaults to whether the session cookie is configured to be secure.

    createIfNotFound

    Whether a new CSRF token should be created if it's not found. Default creates one if it's a GET request that accepts HTML.

Value Members

  1. final def !=(arg0: AnyRef): Boolean

    Definition Classes
    AnyRef
  2. final def !=(arg0: Any): Boolean

    Definition Classes
    Any
  3. final def ##(): Int

    Definition Classes
    AnyRef → Any
  4. final def ==(arg0: AnyRef): Boolean

    Definition Classes
    AnyRef
  5. final def ==(arg0: Any): Boolean

    Definition Classes
    Any
  6. def apply(next: EssentialAction): EssentialAction

    Definition Classes
    CSRFFilterEssentialFilter
  7. final def asInstanceOf[T0]: T0

    Definition Classes
    Any
  8. def clone(): AnyRef

    Attributes
    protected[java.lang]
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  9. val cookieName: Option[String]

    If defined, causes the filter to store the token in a Cookie with this name instead of the session.

  10. val createIfNotFound: (RequestHeader) ⇒ Boolean

    Whether a new CSRF token should be created if it's not found.

    Whether a new CSRF token should be created if it's not found. Default creates one if it's a GET request that accepts HTML.

  11. final def eq(arg0: AnyRef): Boolean

    Definition Classes
    AnyRef
  12. def finalize(): Unit

    Attributes
    protected[java.lang]
    Definition Classes
    AnyRef
    Annotations
    @throws( classOf[java.lang.Throwable] )
  13. final def getClass(): Class[_]

    Definition Classes
    AnyRef → Any
  14. final def isInstanceOf[T0]: Boolean

    Definition Classes
    Any
  15. final def ne(arg0: AnyRef): Boolean

    Definition Classes
    AnyRef
  16. final def notify(): Unit

    Definition Classes
    AnyRef
  17. final def notifyAll(): Unit

    Definition Classes
    AnyRef
  18. val secureCookie: Boolean

    If storing the token in a cookie, whether this Cookie should set the secure flag.

    If storing the token in a cookie, whether this Cookie should set the secure flag. Defaults to whether the session cookie is configured to be secure.

  19. final def synchronized[T0](arg0: ⇒ T0): T0

    Definition Classes
    AnyRef
  20. val tokenName: String

    The key used to store the token in the Play session.

    The key used to store the token in the Play session. Defaults to csrfToken.

  21. final def wait(): Unit

    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  22. final def wait(arg0: Long, arg1: Int): Unit

    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  23. final def wait(arg0: Long): Unit

    Definition Classes
    AnyRef
    Annotations
    @throws( ... )

Inherited from Serializable

Inherited from Serializable

Inherited from Product

Inherited from Equals

Inherited from EssentialFilter

Inherited from AnyRef

Inherited from Any

Ungrouped