com.liferay.portal.security.auth

Class MVCPortletAuthTokenWhitelist

java.lang.Object

com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

com.liferay.portal.security.auth.MVCPortletAuthTokenWhitelist

All Implemented Interfaces:

com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

public class MVCPortletAuthTokenWhitelist
extends com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

Author:

Tomas Polesovsky

Field Summary

Fields inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

serviceRegistrations, serviceTrackers

Constructor Summary

Constructors

Constructor and Description
MVCPortletAuthTokenWhitelist()

Method Summary

Modifier and Type	Method and Description
protected java.lang.String[]	getMVCActionCommandNames(javax.servlet.http.HttpServletRequest httpServletRequest, java.lang.String portletId)
protected java.lang.String[]	getMVCActionCommandNames(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
protected java.lang.String	getWhitelistValue(java.lang.String portletName, java.lang.String whitelistAction)
boolean	isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.model.Portlet portlet)
boolean	isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest, com.liferay.portal.kernel.model.Portlet portlet)
boolean	isPortletURLCSRFWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
boolean	isPortletURLPortletInvocationWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)
protected void	trackWhitelistServices(java.lang.String whitelistName, java.lang.Class<?> serviceClass, java.util.Set<java.lang.String> whiteList)

Methods inherited from class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

destroy, isOriginCSRFWhitelisted, isValidSharedSecret, registerPortalProperty, trackWhitelistServices

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MVCPortletAuthTokenWhitelist

public MVCPortletAuthTokenWhitelist()

Method Detail

isPortletCSRFWhitelisted

public boolean isPortletCSRFWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                        com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isPortletCSRFWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletCSRFWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletInvocationWhitelisted

public boolean isPortletInvocationWhitelisted(javax.servlet.http.HttpServletRequest httpServletRequest,
                                              com.liferay.portal.kernel.model.Portlet portlet)

Specified by:

isPortletInvocationWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletInvocationWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletURLCSRFWhitelisted

public boolean isPortletURLCSRFWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLCSRFWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletURLCSRFWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

isPortletURLPortletInvocationWhitelisted

public boolean isPortletURLPortletInvocationWhitelisted(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

Specified by:

isPortletURLPortletInvocationWhitelisted in interface com.liferay.portal.kernel.security.auth.AuthTokenWhitelist

Overrides:

isPortletURLPortletInvocationWhitelisted in class com.liferay.portal.kernel.security.auth.BaseAuthTokenWhitelist

getMVCActionCommandNames

protected java.lang.String[] getMVCActionCommandNames(javax.servlet.http.HttpServletRequest httpServletRequest,
                                                      java.lang.String portletId)

getMVCActionCommandNames

protected java.lang.String[] getMVCActionCommandNames(com.liferay.portal.kernel.portlet.LiferayPortletURL liferayPortletURL)

getWhitelistValue

protected java.lang.String getWhitelistValue(java.lang.String portletName,
                                             java.lang.String whitelistAction)

trackWhitelistServices

protected void trackWhitelistServices(java.lang.String whitelistName,
                                      java.lang.Class<?> serviceClass,
                                      java.util.Set<java.lang.String> whiteList)