CSRFTokenSigner
Related Docs:
object CSRFTokenSigner
| package crypto
Compare two signed tokens
Extract a signed token that was signed by signToken(String).
Extract a signed token that was signed by signToken(String).
The signed token to extract.
The verified raw token, or None if the token isn't valid.
Generates a signed token.
Generates a cryptographically secure token.
Sign a token.
Sign a token. This produces a new token, that has this token signed with a nonce.
This primarily exists to defeat the BREACH vulnerability, as it allows the token to effectively be random per request, without actually changing the value.
The token to sign
The signed token
Constant time equals method.
Constant time equals method.
Given a length that both Strings are equal to, this method will always run in constant time. This prevents timing attacks.
(Since version 2.6.0) Please use java.security.MessageDigest.isEqual(a.getBytes("utf-8"), b.getBytes("utf-8")) over this method.
Cryptographic utilities for generating and validating CSRF tokens.
This trait should not be used as a general purpose encryption utility.