class CSRFActionHelper extends AnyRef
- Source
- CSRFActions.scala
Linear Supertypes
Ordering
- Alphabetic
- By Inheritance
Inherited
- CSRFActionHelper
- AnyRef
- Any
- Hide All
- Show All
Visibility
- Public
- Protected
Instance Constructors
- new CSRFActionHelper(sessionConfiguration: SessionConfiguration, csrfConfig: CSRFConfig, tokenSigner: CSRFTokenSigner)
Construct a new CSRFActionHelper and determine the TokenProvider from configuration.
- new CSRFActionHelper(sessionConfiguration: SessionConfiguration, csrfConfig: CSRFConfig, tokenSigner: CSRFTokenSigner, tokenProvider: TokenProvider)
Value Members
- def addTokenToResponse(request: RequestHeader, result: Result): Result
- def clearTokenIfInvalid(request: RequestHeader, errorHandler: ErrorHandler, msg: String): Future[Result]
- def generateToken: Token
- def getHeaderToken(request: RequestHeader): Option[String]
- def getTokenToValidate(request: RequestHeader): Option[String]
Get the header token, that is, the token that should be validated.
- def hasInvalidContentType(request: RequestHeader): Boolean
- def isCacheableBySharedCache(result: Result): Boolean
- returns
false if Cache-Control header is absent or true if it exists but does not contain an explicit directive to prevent caching (e.g. "no-store") in shared caches (e.g. proxies)
- def requiresCsrfCheck(request: RequestHeader): Boolean
- def tagRequest[A](request: Request[A], token: Token): Request[A]
- def tagRequestFromHeader[A](request: Request[A]): Request[A]
- def tagRequestFromHeader(request: RequestHeader): RequestHeader
Tag incoming requests with the token in the header
- def tagRequestHeader(request: RequestHeader, token: => Token): RequestHeader
- def tagRequestHeaderWithNewToken(request: RequestHeader): RequestHeader
- def tagRequestWithNewToken(requestBuilder: RequestBuilder): RequestBuilder
- def tagRequestWithNewToken[A](request: Request[A]): Request[A]