com.liferay.portal.security.auth

Class AuthTokenWhitelistImpl

java.lang.Object

com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

com.liferay.portal.security.auth.AuthTokenWhitelistImpl

All Implemented Interfaces:

com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

public class AuthTokenWhitelistImpl
extends com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

Author:

Raymond Augé, Tomas Polesovsky

Field Summary

Fields inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

serviceRegistrations, serviceTrackers

Constructor Summary

Constructors

Constructor and Description
AuthTokenWhitelistImpl()

Method Summary

Modifier and Type	Method and Description
boolean	isOriginCSRFWhitelisted(long companyId, java.lang.String origin)
boolean	isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.model.Portlet portlet)
boolean	isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.model.Portlet portlet)
boolean	isPortletURLCSRFWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
boolean	isPortletURLPortletInvocationWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
boolean	isValidSharedSecret(java.lang.String sharedSecret)

Methods inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

destroy, registerPortalProperty, trackWhitelistServices

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthTokenWhitelistImpl

public AuthTokenWhitelistImpl()

Method Detail

isOriginCSRFWhitelisted

public boolean isOriginCSRFWhitelisted(long companyId,
                                       java.lang.String origin)

Specified by:

isOriginCSRFWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isOriginCSRFWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletCSRFWhitelisted

public boolean isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                        com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isPortletCSRFWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletCSRFWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletInvocationWhitelisted

public boolean isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                              com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isPortletInvocationWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletInvocationWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletURLCSRFWhitelisted

public boolean isPortletURLCSRFWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLCSRFWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletURLCSRFWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletURLPortletInvocationWhitelisted

public boolean isPortletURLPortletInvocationWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLPortletInvocationWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletURLPortletInvocationWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isValidSharedSecret

public boolean isValidSharedSecret(java.lang.String sharedSecret)

Specified by:

isValidSharedSecret in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isValidSharedSecret in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist