public class RequestSecurityManagerImpl extends Object implements RequestSecurityManager
| Constructor and Description |
|---|
RequestSecurityManagerImpl(Request request,
Response response,
ComponentEventLinkEncoder componentEventLinkEncoder,
MetaDataLocator locator,
boolean securityEnabled) |
| Modifier and Type | Method and Description |
|---|---|
boolean |
checkForInsecureComponentEventRequest(ComponentEventRequestParameters parameters)
Checks the target page of the component event request to see if it is secure; if so, and the
request is not secure, then a redirect to the page is generated and sent, preserving the
original component event request.
|
boolean |
checkForInsecurePageRenderRequest(PageRenderRequestParameters parameters)
Checks the page to see if it is secure; if so, and the request is not secure, then a redirect to the page is
generated and sent.
|
LinkSecurity |
checkPageSecurity(String pageName)
Determines if the page security does not match the request's security.
|
public RequestSecurityManagerImpl(Request request, Response response, ComponentEventLinkEncoder componentEventLinkEncoder, MetaDataLocator locator, @Symbol(value="tapestry.secure-enabled") boolean securityEnabled)
public boolean checkForInsecureComponentEventRequest(ComponentEventRequestParameters parameters) throws IOException
RequestSecurityManagercheckForInsecureComponentEventRequest in interface RequestSecurityManagerparameters - parameters for the current requestIOExceptionpublic boolean checkForInsecurePageRenderRequest(PageRenderRequestParameters parameters) throws IOException
RequestSecurityManagercheckForInsecurePageRenderRequest in interface RequestSecurityManagerparameters - parameters for the current requestIOExceptionpublic LinkSecurity checkPageSecurity(String pageName)
RequestSecurityManagerLinkSecurity.SECURE
or LinkSecurity.INSECURE if the request security matches the pages. Otherwise, returns
LinkSecurity.FORCE_SECURE or LinkSecurity.FORCE_INSECURE (which will force fully qualified URLs to be generated when
rendering).checkPageSecurity in interface RequestSecurityManagerpageName - for the security check5.6.4 - Copyright © 2003-2021 The Apache Software Foundation.