Class CsrfProtectionRequestMatcher

java.lang.Object
com.erudika.para.server.security.CsrfProtectionRequestMatcher
public final class CsrfProtectionRequestMatcher extends Object
CSRF protection matcher - matches POST, PUT, PATCH, DELETE requests that are not in the ignored list and not API or authentication requests. These requests will be rejected if they don't contain a valid CSRF token.
Author:
Alex Bogdanovski [[email protected]]

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final org.springframework.security.web.util.matcher.RequestMatcher
    INSTANCE
    An instance of this class.

  • Method Summary

    Modifier and Type
    Method
    Description
    default org.springframework.security.web.util.matcher.RequestMatcher.MatchResult
    matcher(jakarta.servlet.http.HttpServletRequest arg0)
     
    boolean
    matches(jakarta.servlet.http.HttpServletRequest request)
     

    Methods inherited from class Object

    equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

    • INSTANCE

      public static final org.springframework.security.web.util.matcher.RequestMatcher INSTANCE
      An instance of this class.

  • Method Details

    • matches

      public boolean matches(jakarta.servlet.http.HttpServletRequest request)

    • matcher

      default org.springframework.security.web.util.matcher.RequestMatcher.MatchResult matcher(jakarta.servlet.http.HttpServletRequest arg0)