Class DefaultViewRequiresCSRFTokenPredicate

java.lang.Object
net.shibboleth.idp.ui.csrf.BaseCSRFTokenPredicate
net.shibboleth.idp.ui.csrf.impl.DefaultViewRequiresCSRFTokenPredicate
All Implemented Interfaces:
Predicate<RequestContext>

public class DefaultViewRequiresCSRFTokenPredicate
extends BaseCSRFTokenPredicate
implements Predicate<RequestContext>

Default Predicate for determining if a CSRF token is required for the given request context. Guaranteed to be in a view-state when tested by the CSRFTokenFlowExecutionListener.

Returns true if the view-state requires a CSRF token. More specifically, returns true iff the state definition does not contain a "csrf_excluded" metadata attribute with a value of true.

  • Constructor Details

    • DefaultViewRequiresCSRFTokenPredicate

      public DefaultViewRequiresCSRFTokenPredicate()
  • Method Details