Class CsrfIndexHtmlRequestListener

java.lang.Object
com.vaadin.hilla.auth.CsrfIndexHtmlRequestListener
All Implemented Interfaces:
com.vaadin.flow.server.communication.IndexHtmlRequestListener, Serializable, EventListener

public class CsrfIndexHtmlRequestListener extends Object implements com.vaadin.flow.server.communication.IndexHtmlRequestListener
An index HTML request listener that generates and sends a token for Cross-Site Request Forgery protection (Double Submit Cookie pattern) of endpoints. Sets a JS readable cookie in the response with the CSRF token, if such a cookie was not present in request.
See Also:
  • Constructor Details

    • CsrfIndexHtmlRequestListener

      public CsrfIndexHtmlRequestListener()
  • Method Details

    • modifyIndexHtmlResponse

      public void modifyIndexHtmlResponse(com.vaadin.flow.server.communication.IndexHtmlResponse indexHtmlResponse)
      Specified by:
      modifyIndexHtmlResponse in interface com.vaadin.flow.server.communication.IndexHtmlRequestListener