org.apache.drill.exec.server.rest

Class WebUtils

java.lang.Object

org.apache.drill.exec.server.rest.WebUtils

public class WebUtils
extends Object

Constructor Summary

Constructors

Constructor and Description
WebUtils()

Method Summary

Modifier and Type	Method and Description
static String	generateCsrfToken() Generates a BASE64 encoded CSRF token from randomly generated 256-bit buffer according to the OWASP CSRF Prevention Cheat Sheet
static String	getCsrfTokenFromHttpRequest(javax.servlet.http.HttpServletRequest request) Retrieves the CSRF protection token from the HTTP request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WebUtils

public WebUtils()

Method Detail

getCsrfTokenFromHttpRequest

public static String getCsrfTokenFromHttpRequest(javax.servlet.http.HttpServletRequest request)

Retrieves the CSRF protection token from the HTTP request.

Parameters:

request - HTTP request that contains a session that stores a CSRF protection token. If there is no session, that means that authentication is disabled.

Returns:

CSRF protection token, or an empty string if there is no session present.

generateCsrfToken

public static String generateCsrfToken()

Generates a BASE64 encoded CSRF token from randomly generated 256-bit buffer according to the OWASP CSRF Prevention Cheat Sheet

Returns:

randomly generated CSRF token.