org.broadleafcommerce.profile.web.core.security

Class SessionFixationProtectionCookie

java.lang.Object

org.broadleafcommerce.profile.web.core.security.SessionFixationProtectionCookie

public class SessionFixationProtectionCookie
extends java.lang.Object

Cookie used to protected against session fixation attacks

Author:

Andre Azzolini (apazzolini)

See Also:

SessionFixationProtectionFilter

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	COOKIE_NAME
protected org.apache.commons.logging.Log	logger

Constructor Summary

Constructors

Constructor and Description
SessionFixationProtectionCookie()

Method Summary

Modifier and Type	Method and Description
static void	forceRemove(javax.servlet.http.HttpServletResponse response)
static java.lang.String	readActiveID(javax.servlet.http.HttpServletRequest request)
static void	remove(javax.servlet.http.HttpServletResponse response)
static void	writeActiveID(javax.servlet.http.HttpServletResponse response, java.lang.String data)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected final org.apache.commons.logging.Log logger

COOKIE_NAME

public static final java.lang.String COOKIE_NAME

See Also:

Constant Field Values

Constructor Detail

SessionFixationProtectionCookie

public SessionFixationProtectionCookie()

Method Detail

readActiveID

public static java.lang.String readActiveID(javax.servlet.http.HttpServletRequest request)

writeActiveID

public static void writeActiveID(javax.servlet.http.HttpServletResponse response,
                                 java.lang.String data)

remove

public static void remove(javax.servlet.http.HttpServletResponse response)

forceRemove

public static void forceRemove(javax.servlet.http.HttpServletResponse response)