Package com.axelor.auth.pac4j

Class AxelorCsrfAuthorizer

java.lang.Object

org.pac4j.core.authorization.authorizer.CsrfAuthorizer

com.axelor.auth.pac4j.AxelorCsrfAuthorizer

All Implemented Interfaces:

org.pac4j.core.authorization.authorizer.Authorizer

@Singleton
public class AxelorCsrfAuthorizer
extends org.pac4j.core.authorization.authorizer.CsrfAuthorizer

Field Summary

Fields

Modifier and Type	Field	Description
static String	CSRF_AUTHORIZER_NAME

Constructor Summary

Constructors

Constructor	Description
AxelorCsrfAuthorizer(ClientListProvider clientListProvider)

Method Summary

Modifier and Type	Method	Description
protected boolean	internalIsAuthorized(org.pac4j.core.context.WebContext context, org.pac4j.core.context.session.SessionStore sessionStore, List<org.pac4j.core.profile.UserProfile> profiles)	Matches AxelorCsrfGenerator behavior.
boolean	isAuthorized(org.pac4j.core.context.WebContext context, org.pac4j.core.context.session.SessionStore sessionStore, List<org.pac4j.core.profile.UserProfile> profiles)

Methods inherited from class org.pac4j.core.authorization.authorizer.CsrfAuthorizer

getHeaderName, getParameterName, hashEquals, isCheckAllRequests, setCheckAllRequests, setHeaderName, setParameterName, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

CSRF_AUTHORIZER_NAME

public static final String CSRF_AUTHORIZER_NAME

See Also:

Constant Field Values

Constructor Detail

AxelorCsrfAuthorizer

@Inject
public AxelorCsrfAuthorizer(ClientListProvider clientListProvider)

Method Detail

isAuthorized

public boolean isAuthorized(org.pac4j.core.context.WebContext context,
                            org.pac4j.core.context.session.SessionStore sessionStore,
                            List<org.pac4j.core.profile.UserProfile> profiles)

Specified by:

isAuthorized in interface org.pac4j.core.authorization.authorizer.Authorizer

Overrides:

isAuthorized in class org.pac4j.core.authorization.authorizer.CsrfAuthorizer

internalIsAuthorized

protected boolean internalIsAuthorized(org.pac4j.core.context.WebContext context,
                                       org.pac4j.core.context.session.SessionStore sessionStore,
                                       List<org.pac4j.core.profile.UserProfile> profiles)

Matches AxelorCsrfGenerator behavior.

Code taken from: https://github.com/pac4j/pac4j/blob/4.5.x/pac4j-core/src/main/java/org/pac4j/core/authorization/authorizer/CsrfAuthorizer.java#L40

Parameters:

context - the web context

sessionStore - the session store

profiles - the user profiles

Returns:

whether the access is authorized